Xerox DocuShare SQL Injection

The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

CVE-2014-2868: Undefined Security Weakness

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable...

CVE-2014-2749

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request...

Cross site request forgery (csrf)

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request...

CVE-2014-2749

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request...

CVE-2014-2749: Exposure of Sensitive Information to an Unauthorized Actor

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request...

CVE-2013-1946

The RESTful Web Services RESTWS module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a...

PT-2014-2521

Name of the Vulnerable Software and Affected Versions Drupal RESTful Web Services RESTWS module versions 7.x-1.x before 7.x-1.3 Drupal RESTful Web Services RESTWS module versions 7.x-2.x before 7.x-2.0-alpha5 Description The issue allows remote attackers to cause a denial of service via a GET...

CVE-2013-1946: Improper Input Validation

The RESTful Web Services RESTWS module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a...

McAfee Cloud Identity Manager ExtensionAccessServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Cloud Identify Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within a servlet called ExtensionAccessServlet which contains a directory...

Kemana Directory 'kemana_admin_passwd' Cookie信息泄漏漏洞

Bugtraq ID:66445 Kemana Directory是一款基于WEB的目录服务。 Kemana Directory存在一个安全漏洞，由于'kemanaadminpasswd' cookie存储了用户密码SHA1哈希，允许可进行中间人攻击的攻击者获得密码信息。 0 Kemana Directory 1.5.6 目前没有详细解决方案提供： http://www.c97.net GET /kemana/admin/revreport.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64...

CVE-2013-1605

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

Buffer overflow

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

CVE-2013-1605

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

PT-2014-2483

Name of the Vulnerable Software and Affected Versions MayGion IP Cameras versions prior to 2013.04.22 05.53 Description The issue allows remote attackers to execute arbitrary code via a long filename in a GET request to a vulnerable API endpoint, such as "/api/v1/download" or similar, by exploiti...

CVE-2013-1605: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 05.53 allows remote attackers to execute arbitrary code via a long filename in a GET request...

CVE-2014-2047

Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2014-2047

Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors...

PT-2014-4450

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 6.0.2 Description A session fixation issue allows remote attackers to hijack web sessions when PHP is configured to accept session parameters through a GET request. Recommendations For ownCloud versions prior to 6.0....