[DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability

http://www.dsecrg.com/pages/vul/show.php?id=133 Digital Security Research Group DSecRG Advisory DSECRG-09-033 Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date ...

CVE-2009-3151

creationtimestamp| type| source ---|---|--- 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9307...

HTTP Server Cookies Set

HTTP cookies are pieces of information that are presented by web servers and are sent back by the browser. As HTTP is a stateless protocol, cookies are a possible mechanism to keep track of sessions. This plugin displays the list of the HTTP cookies that were set by the web server when it was...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

SAP GUI 6.4 - ActiveX Accept Remote Buffer Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

SAP GUI For WIndows 6.5 Buffer Overflow

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= SAP GUI 6.4 ActiveX Accept Remote Buffer Overflow PoC ======================================================= Digital Security Research Group DSecRG Advisory DSECRG-09-015 Application: SAP G...

Fedora Core 10 FEDORA-2009-5002 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-5002. OpenVAS Vulnerability Test $Id: fcore20095002.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5002 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:224-1)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, whic...

SAP Cfolders Linked Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-021 Original advisory: http://dsecrg.com/pages/vul/show.php?id=121 Application: SAP Cfolders SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms collaboration rooms Vendor URL: http://SAP.com Bugs: Multiple Liked XSS Risk:...

Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method

====================================================================== Secunia Research 15/04/2009 - SAP GUI KWEdit ActiveX Control "SaveDocumentAs" Insecure Method - ====================================================================== Table of Contents Affected...

Apollo 37zz - .m3u Local Heap Overflow (PoC)

Apollo 37zz - .m3u Local Heap Overflow PoC !/usr/bin/perl Apollo 37zz .M3U File Local Heap Overflow PoC Found By : Cyber-Zone ABDELKHALEK E-mail : [email protected] Home : WwW.IQ-TY.CoM , WwW.No-Exploit.CoM Greetz to: Hussin X , Jiko , ZoRLu , Stack ,Nabilx , Mag!c ompo , And All MoroCCaN...

Dust on the network enterprise website management system vulnerability-vulnerability warning-the black bar safety net

company. asp a get way to get the variable id's value is only filtered spaces and judgment Whether the value is empty contains an anti-note only the filter get way to pass the incoming parameter value company. asp it is request. querystring"id" that is not using the post And cookie injection but...

Mandriva Update for kernel MDVSA-2008:224 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:224 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

SAP NetWeaver Application Server (UDDI client) XSS Vulnerability

Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date of Public Advisory: 11.08.2009 Reference: SAP Security Note 1322098 Author: Alexandr Polyakov Description SAP NetWeaver...

Fedora Update for tomboy FEDORA-2007-3253

Check for the Version of tomboy OpenVAS Vulnerability Test Fedora Update for tomboy FEDORA-2007-3253 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for tomboy FEDORA-2007-3011

Check for the Version of tomboy OpenVAS Vulnerability Test Fedora Update for tomboy FEDORA-2007-3011 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for xfce4-notes-plugin FEDORA-2007-4368

Check for the Version of xfce4-notes-plugin OpenVAS Vulnerability Test Fedora Update for xfce4-notes-plugin FEDORA-2007-4368 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2008-6109

Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by 1 opening unspecified screens, related to the "double click selector bug"; or modifying a 2 animal, 3 owner, 4...

CVE-2008-6111: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL commands via the note parameter...