CVE-2010-0311

Technical details about CVE-2010-0311 are not publicly provided in the supplied documents; no concrete affected products, versions, or remediation info are listed here. Monitor for updates in the connected sources.

CVE-2009-3750

SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter...

Sql injection

SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter...

HP ProCurve Identity Driven Manager (IDM)未明特权提升漏洞

Bugraq ID: 36462 CVE ID：CVE-2009-2681 HP ProCurve Identity Driven Manager是一款允许网管员动态分配用户及设备的网络链接及访问，以适应不同业务策略。 在运行IAS的Microsoft Windows 2003和Windows 2008系统平台运行HP ProCurve Identity Driven Manager存在未明错误。 本地攻击者可以利用此漏洞提升特权。 HP ProCurve Identity Driven Manager IDM A.03.00 HP ProCurve Identity Driven...

[security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01798159 Version: 1 HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager IDM Running on Microsoft IAS or NPS, Local Unauthorized Access NOTICE: The information in this Security...

HP Procurve IDM privilege escalation

No description provided...

httpdx <= 0.5b FTP Server (CWD) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ======================================================== httpdx " %sys.argv0 sys.exit0 skape's egghunter shellcode shellunt= "\x66\x81\xca\xff\x0f\x42\x52\x6a\x02\x58\xcd\x2e\x3c\x05\x5a\x74"...

Sun IDM Arbitrary Command Execution

1 Summary Affected Software: Sun IDM 7.1, 8.0 Vendor URL: http://www.sun.com/ Severity: Medium 2 Description Sun Identity Manager facilitates centralized identity provisioning for variety of application and platforms. Its web interface allows end users to request password change. To handle such...

Sun IDM Arbitrary Commands Execution Vulnerability

1 Summary Affected Software: Sun IDM 7.1, 8.0 Vendor URL: http://www.sun.com/ Severity: Medium 2 Description Sun Identity Manager facilitates centralized identity provisioning for variety of application and platforms. Its web interface allows end users to request password change. To handle such...

SDP Downloader 2.3.0 (.ASX) Local Buffer Overflow Exploit (SEH)

No description provided by source. usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloader v2.3.0 .ASX Local...

SDP Downloader 2.3.0 Buffer Overflow

usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloader v2.3.0 .ASX Local Buffer Overflow Exploit SEH\n" print...

SDP Downloader 2.3.0 (.ASX) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits =============================================================== SDP Downloader 2.3.0 .ASX Local Buffer Overflow Exploit SEH =============================================================== usage: exploit.py xNote: In this case we have the...

SDP Downloader 2.3.0 - .asx Local Buffer Overflow (SEH) (1)

SDP Downloader 2.3.0 - .asx Local Buffer Overflow SEH 1 usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloade...

CVE-2009-1076

CVE-2009-1076 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The end-user login flow based on a question, when used with IDMROOT/questionLogin.jsp?accountId=USER, reveals different responses depending on whether USER exists. This behavior enables remote attackers to enumerate val...

CVE-2009-1082

Sun Java System Identity Manager (IdM) 7.0–8.0 is affected by a privilege-escalation issue where remote authenticated users can submit crafted commands to the Admin Console to gain administrative privileges (e.g., account creation) via the saveNoValidate and related saveNoValidateAllowedFormsAndW...

CVE-2009-1081

CVE-2009-1081 affects Sun Java System Identity Manager (IdM) 7.0–8.0. The issue is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug IDs 19595 and 19661). The connected documents do not provide concrete exploi...

CVE-2009-1077

The CVE-2009-1077 entry concerns Sun Java System Identity Manager (IdM) 7.0–8.0. The admin Change My Password functionality fails to enforce the RequiresChallenge setting, enabling remote authenticated users to change other users’ passwords, demonstrated by altering the administrator account. Doc...

CVE-2009-1080

CVE-2009-1080 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug ID 19033). Affected component: IdM web interfac...

CVE-2009-1074

CVE-2009-1074 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The issue is that SSL is not used in all expected circumstances, enabling remote attackers to potentially obtain sensitive information by sniffing network traffic. The description notes related factors such as lack of s...

Novell IDM跨站脚本和HTML注入漏洞

BUGTRAQ ID: 30952 CNCAN ID：CNCAN-2008090305 Novell IDM是一款身份管理解决方案。 Novell IDM不正确处理用户提交的输入，远程攻击者可以利用漏洞使恶意脚本代码在目标用户浏览器上执行，导致敏感信息泄漏。 受影响的Novell User Application版本如下： 3.0.1 3.5.0 3.5.1 受影响的Novell Identity Manager Roles Based Provisioning模块版本如下： 3.6.0 3.6.1 Novell User Application 3.5.1 Novell User...