EUVD-2013-0611

Malware in sbrugna...

EUVD-2018-12000

Malware in sbrugna...

EUVD-2012-5642

Malware in sbrugna...

EUVD-2012-5639

Malware in sbrugna...

EUVD-2014-6029

Malware in sbrugna...

EUVD-2014-0882

Malware in sbrugna...

EUVD-2014-6024

Malware in sbrugna...

EUVD-2014-3081

Malware in sbrugna...

EUVD-2014-3080

Malware in sbrugna...

CVE-2018-1421

IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139023...

CVE-2018-1421: Improper Restriction of XML External Entity Reference

IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139023...

PT-2018-12348

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower Appliances versions 7.1 through 7.6 Description The issue allows for a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...

CVE-2017-1591: Improper Neutralization of Input During Web Page Generation

IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

PT-2017-14279

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower Appliances versions 7.0.0 through 7.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

IBM WebSphere DataPower XC10 Appliance Detection (HTTP)

Detects the installed version of IBM WebSphere DataPower XC10 Appliance. This script sends an HTTP GET request and tries to login via default credentials and fetches the version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

PT-2016-5256

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliances versions 2.1 through 2.5 Description A buffer overflow issue in the CLI of IBM WebSphere DataPower XC10 appliances allows remote authenticated users to cause a denial of service via unspecified vectors...

CVE-2016-2870: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors...

Unspecified Vulnerability in IBM WebSphere DataPower XC10

IBM WebSphere DataPower XC10 is a caching platform from IBM in the United States. The platform allows distributed caching of data with little or no change to existing applications. A security vulnerability exists in IBM WebSphere DataPower XC10 versions 2.1 and 2.5 due to a program writing...

CVE-2015-1970

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere...

PT-2015-5523

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 through 2.1.0.3 IBM WebSphere DataPower XC10 appliance versions 2.5 through 2.5.0.4 Description The issue allows physically proximate attackers to obtain sensitive information by extracting a...