CVE-2012-2949

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

CVE-2012-2949: Undefined Security Weakness

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

ZTE Score M Android Phone Found to Have Backdoor Installed

UPDATE–An Android handset produced by Chinese manufacturer ZTE has a backdoor installed that could enable an attacker to take control of an affected device remotely and run arbitrary code. The manufacturer has acknowledged the issue in the ZTE Score M, which includes a harcoded password, and says...

Design/Logic Flaw

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package XCP...

CVE-2012-1693

CVE-2012-1693 affects Oracle SPARC Enterprise M Series Servers XCP 1110, with the issue related to the XSCF Control Package (XCP) that can impact availability. The description in the connected records is generic and does not specify the exact root cause, vulnerable component version details, expl...

CVE-2012-0548

Technical details of CVE-2012-0548 are not publicly available in the provided documents; there is no information here about affected products, root cause, impact, or remediation. Monitor for updates.

PT-2012-3450

Name of the Vulnerable Software and Affected Versions Oracle SPARC Enterprise M Series Servers XCP version 1110 Description The issue affects the availability of the system and is related to the XSCF Control Package XCP. Recommendations For Oracle SPARC Enterprise M Series Servers XCP version 111...

PT-2012-2663

Name of the Vulnerable Software and Affected Versions Oracle SPARC Enterprise M Series Servers XCP versions 1110 and earlier Description The issue affects confidentiality and is related to the XSCF Control Package XCP, allowing local users to exploit it. Recommendations For Oracle SPARC Enterpris...

CVE-2012-1693: Undefined Security Weakness

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package XCP...

CVE-2012-0548: Undefined Security Weakness

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 and earlier allows local users to affect confidentiality, related to XSCF Control Package XCP...

TestLink SQL Injection Vulnerabilities

Exploit for php platform in category web applications ------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27...

TestLink 1.9.3 SQL Injection

------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27 January 2012 Vendor Patch: 4 February 2012 Public...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

Authentication flaw

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

CVE-2011-5078 affects Sybase M-Business Anywhere 6.7 before ESD#3 and 7.0 before ESD#7. The web administration interface does not require admin authentication for unspecified scripts, enabling remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078: Undefined Security Weakness

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

PT-2012-2056

Name of the Vulnerable Software and Affected Versions Sybase M-Business Anywhere versions 6.7 through 6.7 before ESD 3 Sybase M-Business Anywhere versions 7.0 through 7.0 before ESD 7 Description The web administration interface in the server does not require admin authentication for certain...

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable. M-SEARCH HTTP/1.1 Host:239.255.255.250:1900...