Apache Olingo OData 4.0 - XML External Entity Injection Exploit

Exploit for java platform in category web applications Product: Apache Olingo OData 4.0 Vendor: Apache Foundation CSNC ID: CSNC-2009-025 CVE ID: CVE-2019-17554 Subject: XML External Entity Resolution XXE Risk: High Effect: Remotely exploitable Author: Archibald Haddock email protected Date:...

Apache Olingo Code Issue Vulnerability

Apache Olingo is a U.S. Apache Apache Software Foundation for the implementation of Open Data Protocol OData, Open Data Protocol Java library. A code issue vulnerability exists in Apache Olingo. An attacker could exploit this vulnerability to execute code or cause other harm...

The vulnerability of the Enterprise Resource Management System “Galaktika ERP” lies in the fact that it stores user accounting data in an open manner, allowing a malicious actor to access and disclose the accounting information of privileged users.

The vulnerability of the Galaktika ERP resource management system lies in the fact that information related to user account data is stored publicly. This information is privileged administrator-sensitive and used for configuring software. Exploiting this vulnerability could allow a malicious acto...

Microsoft OData Denial of Service Vulnerability

Open Data Protocol Open Data Protocol, OData is a Web protocol for querying and updating data that provides a way to expose data that exists in an application, a standard initiated by Microsoft. A remote denial of service vulnerability exists in Microsoft OData. An attacker could exploit this...

CVE-2018-2465

SAP HANA versions 1.0 and 2.0 Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, an unauthorized hacker can cause the database server to crash...

opendatacon.org XSS vulnerability

Open Bug Bounty ID: OBB-280136 Description| Value ---|--- Affected Website:| opendatacon.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

July 19, 2017 – Morning Cyber Coffee Headlines – “Rosetta Stone” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 19, 2017 - Headlines Cyberattack on Ukrainian Clinics, Pharmacies Worries...

Microsoft Windows multiple security vulnerabilities

Print spooler service code execution, XML library integer overflow and memory corruption, multiple .Net vulnerabilities, Win32K privilege escalation SSL/TLS library protection bypass, Open Data Protocol DoS...

Denial of service

The WCF Replace function in the Open Data aka OData protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service resource consumption and daemon restart via craft...

Microsoft .NET Framework Open Data Protocol DOS Vulnerability (2769327)

This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-007.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Open Data Protocol DOS Vulnerability 2769327 Authors: Antu Sanadi Copyright: Copyright c 2013...

Microsoft .NET Framework Open Data Protocol DOS Vulnerability (2769327)

This host is missing an important security update according to Microsoft Bulletin MS13-004. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-007: Vulnerability in Open Data Protocol Could Allow Denial of Service (2769327)

The remote Windows host is running a version of the Microsoft .NET Framework that is affected by a denial of service vulnerability in the Open Data OData protocol. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted HTTP request to the affected site. C...

MS13-007: Vulnerability in Open Data Protocol could allow denial of service: January 8, 2013

Resolves a vulnerability in the Open Data Protocol OData services in the .NET Framework that could allow a Denial of Service application.View products that this article applies to.IntroductionMicrosoft has released the security bulletin MS13-007. You can view the complete security bulletin by goi...

Alex Howard on Government Security, Internet Freedom and Open Gov

In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard @digiphile of O’Reilly Media about the open government and open data movements, how they’re affecting security and the ways in which Internet freedom and privacy play into the current climate online...