CVE-2008-1546

The CVE-2008-1546 entry concerns Mitsubishi Electric GB-50 and GB-50A air-conditioner controllers. Affected component: servlet/MIMEReceiveServlet in the web controller. Root cause: processing of an XML document containing a setRequest command allows remote attackers to crash or otherwise cause a ...

Mozilla Foundation Security Advisory 2008-13

Mozilla Foundation Security Advisory 2008-13 Title: Multiple XSS vulnerabilities from character encoding Impact: Moderate Announced: March 25, 2008 Reporter: Alexey Proskuryakov, Yosuke Hasegawa, Simon Montagu Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 Thunderbird 2.0.0....

Mitsubishi Electric GB-50A远程绕过认证漏洞

BUGTRAQ ID: 28406 GB-50A是三菱中央空调系统的基于浏览器的管理控制系统。 GB-50A在实现认证机制时存在漏洞，远程攻击者可能利用此漏洞非授权操作空调。 GB-50A Web控制器使用了一组Java applet进行自身交互，而这些applet之间的通讯使用一系列未经认证或加密的xml报文，如果用户知道了所控制空调组的IP地址的话，就可以执行各种非授权操作，包括开关空调或随意设置温度。 Mitsubishi Electric GB-50A Mitsubishi Electric -------------------...

Mitsubishi GB-50A unauthorized access

Access authentication is not implemented...

Mitsubishi Electric GB-50A - Multiple Remote Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/28406/info The Mitsubishi Electric GB-50A is prone to multiple authentication-bypass vulnerabilities. Successful exploits will allow unauthorized attackers to gain access to administrative functionality and completely compromise vulnerable devices; other...

Mitsubishi Electric GB-50A - Multiple Remote Authentication Bypass Vulnerabilities

Mitsubishi Electric GB-50A - Multiple Remote Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/28406/info The Mitsubishi Electric GB-50A is prone to multiple authentication-bypass vulnerabilities. Successful exploits will allow unauthorized attackers to gain access t...

[SECURITY] Fedora 7 Update: icu-3.6-20.fc7

The International Components for Unicode ICU libraries provide robust and full-featured Unicode services on a wide variety of platforms. ICU supports the most current version of the Unicode standard, and they provide support for supplementary Unicode characters needed for GB 18030 repertoire...

CVE-2007-1998

Direct static code injection vulnerability in HIOX Guest Book HGB 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php...

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

CentOS 3 / 4 : tcpdump (CESA-2005:417)

Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. This updated package also adds support for output files larger than 2 GB. Tcpdump is a command-line tool for monitoring...

CVE-2006-0856

The CVE-2006-0856 entry describes a SQL injection in login.php of Scriptme SmE GB Host 1.21 that lets remote attackers execute arbitrary SQL and bypass authentication via the Username parameter. Affected software is Scriptme SmE GB Host 1.21; the vulnerability arises from improper handling of the...

[eVuln] SmE GB Host Authentication Bypass Vulnerability

New eVuln Advisory: SmE GB Host Authentication Bypass Vulnerability http://evuln.com/vulns/66/summary.html --------------------Summary---------------- eVuln ID: EV0066 Software: SmE GB Host Sowtware's Web Site: http://www.scriptme.com/ Versions: 1.21 Critical Level: Moderate Type: SQL Injection...

[eVuln] Scriptme products BBCode 'url' XSS Vulnerability

New eVuln Advisory: Scriptme products BBCode 'url' XSS Vulnerability http://evuln.com/vulns/65/summary.html --------------------Summary---------------- eVuln ID: EV0065 CVE: CVE-2006-0661 Vendor: Scriptme Vendor's Web Site: http://www.scriptme.com/ Software: "SmE GB Host" "SmE Blog Host" Versions...

Cross site scripting

Cross-site scripting XSS vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag...

CVE-2006-0661

Cross-site scripting XSS vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag...

CVE-2006-0661

Cross-site scripting XSS vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag...

CVE-2006-0661

The CVE-2006-0661 entry concerns a Cross-Site Scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host, exploitable via the BBcode [url] tag to inject arbitrary script/HTML. Affected components: Scriptme SmE GB Host 1.21 and SmE Blog Host. Root cause and impact: XSS allowing r...

[SA18786] SmE GB Host / Blog Host "url" BBcode Script Insertion

TITLE: SmE GB Host / Blog Host "url" BBcode Script Insertion SECUNIA ADVISORY ID: SA18786 VERIFY ADVISORY: http://secunia.com/advisories/18786/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SmE GB Host 1.x http://secunia.com/product/7949/ SmE Blog Host...