pda-ag.ch Cross Site Scripting vulnerability OBB-3347454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Publicly disclosed vulnerability (CVE-2021-4034) in Polkit affects IBM Netezza PDA OS Security

Summary Polkit is shipped with PDA OS Security kits. This Bulletin provides mitigation for the reported CVE Vulnerability Details CVEID: CVE-2021-4034 DESCRIPTION: Polkit could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect handling of the...

XML Entity Injection Vulnerability in jeewms

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms there is an XML entity injection vulnerability , an attacker can use the vulnerability to read the server file...

JEEWMS suffers from a file upload vulnerability (CNVD-2021-51493)

JEEWMS JAVA-based warehouse management system support for self-support and third-party, including PDA side and WEB side. JEEWMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File upload vulnerability in jeewms (CNVD-2021-51414)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can upload malicious files through the vulnerability , control the server...

SQL injection vulnerability in jeewms (CNVD-2021-51413)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

File upload vulnerability in jeewms (CNVD-2021-49574)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

Security Bulletin: IBM Netezza Host Management is affected by the vulnerabilities known as Spectre and Meltdown.

Summary IBM Netezza Host Management is affected by the vulnerabilities known as Spectre and Meltdown, which can enable CPU data cache timing to be abused to bypass conventional memory security restrictions to gain access to privileged memory that should be inaccessible. Vulnerability Details CVEI...

Threat Outbreak Alert RuleID31986: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56801 First Published: 2018 February 13 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31986 may contain the following files: Name |...

Generalized SQL Injection Vulnerability in Xiamen Yaxun PDA System

The "Palm Service" system is an efficient process management system of enterprise mobile informationization based on the application of GPS mobile location management technology in response to the shortcomings of the traditional management mode of the enterprise field personnel and after years of...

pda.sky.com XSS vulnerability

Vulnerable URL: http://pda.sky.com/video/payvideosubmenu.asp?net=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E=golf Details: Description| Value ---|--- Patched:| Yes, at 08.11.2015 Latest check for patch:| 08.11.2015 17:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

SMA-DB 0.3.14 (pfad_z) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================= SMA-DB 0.3.14 pfadz Local File Inclusion Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Esoftpro Online Contact Manager - Multiple Vulnerabilities

Esoftpro Online Contact Manager - Multiple Vulnerabilities Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:3 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYu...

Esoftpro Online Contact Manager Multiple Vulnerability

Exploit for php platform in category web applications ====================================================== Esoftpro Online Contact Manager Multiple Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

SMA-DB 0.3.13 - Multiple Remote File Inclusions

SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip - about SMA-DB: Written in PHP4: SMA-DB is a Databa...

[SECURITY] Fedora 8 Update: synce-kpm-0.11-3.fc8

SynCE-KPM stands for SynCE KDE PDA Manager and aims to be an application to manage WM5/WM6 PDA devices from Linux...

CRYPTOCard CRYPTO-Server本地信息泄露漏洞

CryptoCard是一款允许在PDA上存储敏感信息的应用程序。 CryptoCard存在设计错误，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 CRYPTOCard CRYPTO-Server 6.4 CRYPTOCard CRYPTO-Server 6.3 升级到CRYPTOCard 6.4.56版本： http://www.cryptocard.com/...

CVE-2005-4152

Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492...

CVE-2005-4152

Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492...

CVE-2005-4152

CVE-2005-4152 affects Soti Pocket Controller-Professional 5.0. Remote attackers could turn off, reboot, or hard reset a PDA by sending initialization/command/reset packets to TCP port 5492. Impact is denial of service and potential device unavailability. Root cause involves handling of specific p...