196 matches found
Mandriva Update for hornetq MDVA-2011:016 (hornetq)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 13 Update: dbus-1.2.24-2.fc13
D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...
CVE-2010-2639
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...
CVE-2010-2639
CVE-2010-2639 affects IBM WebSphere Commerce Enterprise 7.0 prior to 7.0.0.2. The issue arises from access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, tied to caching of mutable objects and concurrency issues, enabling remote attackers to read messages intended for o...
CVE-2010-2639: Exposure of Sensitive Information to an Unauthorized Actor
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...
SAP NetWeaver MessagingServer — XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Messaging system from 7.10-7.30 Vendor URL: http://www.sap.com Bugs: Linked XSS and Stored XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of Public Advisory: 12.04.2011 Author: Alexandr Polyakov Description...
[SECURITY] [DSA 1837-1] New dbus packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...
Directory traversal
Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...
CVE-2008-6308
CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...
CVE-2008-6308: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...
Fedora Update for dbus FEDORA-2008-2043
Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2008-2043 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Command injection
The Electronic Messaging System Microsoft Data Base EMSMDB32 provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service application outage via a malformed MAPI command, aka "Literal...
Nokia N95-8 (JPG File) Remote Crash PoC
No description provided by source. Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more...
Nokia N95-8 (JPG File) Remote Crash PoC
Exploit for hardware platform in category dos / poc ======================================= Nokia N95-8 JPG File Remote Crash PoC ======================================= Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3...
53KF online customer service system XSS vulnerability-vulnerability warning-the black bar safety net
Author: xushaopei About 53KF: Online customer service(WWW.53KF.COM is the leading site online customer service system, by the six degrees company, the investment founded, is committed to the achievement of the largest web dialogue tool provider. There have been 2 2 million site users in the use o...
PunBB (Private Messaging System 1.2.x) Multiple LFI Exploit
No description provided by source. ?php errorreporting0; iniset"defaultsockettimeout",5; / PunBB Private Messaging System 1.2.x Multiple LFI Exploit ----------------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/files.php?pid=52...
PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions
PunBB Private Messaging System 1.2.x - Multiple Local File Inclusions ?php errorreporting0; iniset"defaultsockettimeout",5; / PunBB Private Messaging System 1.2.x Multiple LFI Exploit ----------------------------------------------------------- by athos - stakerathotmaildotit download mod...
PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions
?php errorreporting0; iniset"defaultsockettimeout",5; / PunBB Private Messaging System 1.2.x Multiple LFI Exploit ----------------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/files.php?pid=52 download cms http://punbb.org...
Extmail security vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability description: ExtMail Project is an active open source messaging system project is currently by ExtMail team maintenance. The item in 2 0 0 5 years 9 on 1 8 November the official launch, initially in the WebMail software is based, has been gradually formed ExtMail software series. Th...
Unfixed XSS vulnerability at www.rentmore.us
Security researcher Uber0n, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.rentmore.us, which at the time of submission ranked 4742346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...