Oracle Java - APPLET Tag Children Property Memory Corruption

Oracle Java - APPLET Tag Children Property Memory Corruption Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ o=document.createElement"applet"; setTimeoutfunction x=o.children; location.reload; , 1; Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE...

Crlf injection

CRLF injection vulnerability in load.php in the Local Management Interface LMI on the IBM Proventia Network Mail Security System PNMSS appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the...

SAP BusinessObjects 'HappyAxis2.jsp' Information Disclosure

The SAP BusinessObjects installation on the remote web server is leaking information via '/BusinessProcessBI/axis2-web/HappyAxis.jsp'. This page contains debugging information such as local file paths, operating system version, and Java version. A remote attacker could use this information to mou...

DOINGSOFT-2008-03-10-001.txt

Identification : DOINGSOFT-2008-03-10-001 CVE-ID : pending Discovery date : 14/12/2007 Correcting Date : 03/04/2008 How to get the patch : http://support.businessobjects.com/downloads/criticalhotfixes/default.asp choose "FixPack 3.5" Publishing date : 14/04/2008 Product : Business Object Infoview...

Business Objects Infoview - cms Cross-Site Scripting

Business Objects Infoview - cms Cross-Site Scripting source: https://www.securityfocus.com/bid/28762/info Business Objects is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input via the Infoview web portal. An attacker may leverage...

Sybase EAServer 5.2 (WebConsole) Remote Stack Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...