352 matches found
Oracle iPlanet Web Server 7.0.x - Image Injection
Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. id: CVE-2020-9314 info: name: Oracle iPlanet Web Server 7.0.x - Image Injection author:...
Oracle iPlanet Web Server 7.0.x - Authentication Bypass
Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE. id:...
CVE-2026-105121
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target...
CVE-2026-105121 OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target...
CVE-2026-105121
Versions of OpenAM before 16.1.3 are affected by an improper authorization vulnerability. The root cause is that realm checks incorrectly use the requester's realm, allowing delegated administrators to bypass intended scoping. Authenticated accounts possessing the iplanet-am-session-destroy-sessi...
EUVD-2026-92025
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target...
CVE-2026-105121: Improper Authorization
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target...
PT-2026-104582
Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An improper authorization issue exists where delegated administrators can destroy sessions outside their assigned realms. This occurs because realm checks are performed using the requester's realm...
Oracle iPlanet Web Server 7.0.x - Authentication Bypass Detection
Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE. !/usr/bin/env...
Detect iPlanet Webserver Detection
Detects Detect iPlanet Webserver Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect iPlanet Webserver Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect iPlanet Webserver Detection'...
Detect Oracle-iPlanet-Web-Server
Detects Detect Oracle-iPlanet-Web-Server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Oracle-iPlanet-Web-Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Oracle-iPlanet-Web-Server',...
iPlanet Messaging Server IMAP Protocol - Detection
iPlanet Messaging Server IMAP protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """iPlanet Messaging Server IMAP protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: in...
EUVD-2002-1635
Malware in sbrugna...
EUVD-2002-0680
Malware in sbrugna...
EUVD-2013-5644
Malware in sbrugna...
EUVD-2001-1287
Malware in sbrugna...
EUVD-2012-1748
Malware in sbrugna...
EUVD-2009-2440
Malware in sbrugna...