EUVD-2006-6206

Malware in sbrugna...

EUVD-2011-1347

Malware in sbrugna...

EUVD-2005-3751

Malware in sbrugna...

EUVD-2014-0400

Malware in sbrugna...

EUVD-2005-3750

Malware in sbrugna...

CVE-2011-1339

Cross-site scripting XSS vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0362

Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...

Cross site scripting

Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...

CVE-2014-0362

Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...

CVE-2014-0362

CVE-2014-0362 describes an XSS flaw in Google Search Appliance (GSA) where input reflected into a [removed] block becomes executable when dynamic navigation is enabled. Affected products are GSA versions earlier than 7.0.14.G.216 and 7.2 earlier than 7.2.0.G.114. The impact is remote script execu...

CVE-2011-1339

Cross-site scripting XSS vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1339

CVE-2011-1339 affects Google Search Appliance (GSA) before version 5.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary JavaScript/HTML via unspecified vectors in the web interface. Impact described as arbitrary script execution in a user’s ...

CVE-2011-1339

Cross-site scripting XSS vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Google Search Appliance vulnerable to cross-site scripting

Overview Google Search Appliance provided by Google contains a cross-site scripting vulnerability. Google Search Appliance from Google is a product that provides searching services for an intranet service or a website. Google Search Appliance contains a cross-site scripting vulnerability. Yosuke...

JVN#86220950: Google Search Appliance vulnerable to cross-site scripting

Google Search Appliance from Google is a product that provides searching services for an intranet service or a website. Google Search Appliance contains a cross-site scripting vulnerability. Impact An arbitrary script may executed on the user's web browser. Solution Update the software Update to...

Google Appliance ProxyStyleSheet Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Google...

Google Appliance ProxyStyleSheet Command Execution

This module exploits a feature in the Saxon XSLT parser used by the Google Search Appliance. This feature allows for arbitrary java methods to be called. Google released a patch and advisory to their client base in August of 2005 GA-2005-08-m. The target appliance must be able to connect back to...

Vulnerabilities in Google Search Appliance

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимостях в Google Search Appliance. XSS: Уязвимости в скрипте search в параметрах ie, site, client и oe: http://site/search?ie=223E3Cscript3Ealertdocument.cookie3C/script3E&site=x&output=xmlnodtd'&client=x&proxystylesheet=x...

Google Search Appliance UTF-7跨站脚本执行漏洞

Google搜索工具是一款大型的企业级硬件搜索工具。 Google搜索工具在处理UTF-7编码的URI时存在跨站脚本漏洞，远程攻击者可能利用此漏洞执行恶意脚本或获取敏感信息。 oe=UTF-7参数用于命令搜索引擎将搜索字符串解释为UTF-7。如果适当地集成了“scriptalert"XSS"/script”字符串的话，就可能将其结合到搜索结果中，导致在用户浏览器会话中执行任意HTML和脚本代码。 Google Search Appliance Google Mini Search Appliance...