PT-2014-5406

Name of the Vulnerable Software and Affected Versions Apache CXF versions 2.6.10 and earlier, 2.7.x before 2.7.8, 3.0.x before 3.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a crafted SAML token in t...

CVE-2014-3584: Undefined Security Weakness

The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service infinite loop via a crafted SAML token in the authorization header of a request to a JAX-RS service...

CentOS Update for resteasy-base CESA-2014:1011 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : resteasy-base (CESA-2014:1011)

Updated resteasy-base packages that fix one security issue are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Song Exporter v2.1.1 RS iOS - Local File Inclusion

No description provided by source...

VHCS <= 2.4.7.1 (Add User) Authentication Bypass Exploit

No description provided by source. html head titleVHCS version = 2.4.7.1 PoC. By RoMaNSoFt/title script language=JavaScript function submitform if document.adminadduser.username.value=='admin' alert'Learn to read before launching an exploit, script-kiddie!'; exit;...

RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.2.4 update (Moderate) (RHSA-2014:0799)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0799 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. Apache CXF is an op...

RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.2.4 update (Moderate) (RHSA-2014:0798)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0798 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. Apache CXF is an op...

Yokogawa Multiple Products Vulnerabilities

OVERVIEW Yokogawa reports that several buffer overflow vulnerabilities affect several of its products. Juan Vazquez of Rapid7 Inc.,Rapid7 Inc., http://www.rapid7.com, web site last accessed May 13, 2014. and independent researcher Julian Vilas Diaz reported to CERT/CC that they identified several...

Song Exporter v2.1.1 RS iOS文件包含漏洞

Song Exporter可以将你iOS设备的歌曲通过WiFi传输到同一局域网内任何电脑上的实用工具，让你无需iTunes也能方便的将音乐备份到电脑上。 本地文件包含Web漏洞允许远程攻击者未经授权包含本地文件的请求或系统特定的路径命令，控制网页应用程序或设备。 0 Song Exporter 2.1.1 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://itunes.apple.com/us/app/song-exporter-pro/id421646421 Proof of Concept PoC:...

Amazon Web Services, aws_portal / remote code execution

awsportal is a tool to Create new AWS instances, volumes for QA and Development purposes with the help of the AWS APIs, all in real-time. this tool has a file which is vulnerable to remote code execution link to source : https://github.com/ejlax/rsportal/ file rs-api-start.php uses getparameter...

[SECURITY] Fedora 19 Update: cxf-2.6.9-1.fc19

Apache CXF is an open-source services framework that aids in the development of services using front-end programming APIs, like JAX-WS and JAX-RS...

[SECURITY] Fedora 18 Update: cxf-2.6.9-1.fc18

Apache CXF is an open-source services framework that aids in the development of services using front-end programming APIs, like JAX-WS and JAX-RS...

IBM WebSphere Application Server 8.5 < Fix Pack 1 Multiple Vulnerabilities

IBM WebSphere Application Server 8.5 before Fix Pack 1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - An input validation error exists related to the 'Eclipse Help System' that can allow arbitrary redirect responses to HTTP...

IBM WebSphere Application Server 远程权限提升漏洞(CVE-2012-4850)

Bugtraq ID:56460 CVE ID:CVE-2012-4850 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server 8.5 Liberty Profile 8.5.0.1之前版本，在使用JAX-RS时，由于不正确校验请求，允许远程攻击者利用漏洞获得高权限。 0 IBM WebSphere Application Server 8.5 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2012-4850

IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors...

Code injection

IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2012-4850

CVE-2012-4850 – IBM WebSphere Application Server Liberty Profile : In versions before 8.5.0.1, when using JAX-RS, requests are not properly validated, allowing remote attackers to gain elevated privileges. The issue is documented in the IBM WebSphere security bulletin and linked advisories, with ...

PT-2012-5609

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 8.5 Liberty Profile versions prior to 8.5.0.1 Description The issue is related to improper request validation when JAX-RS is used, allowing remote attackers to gain privileges via unspecified vectors...

CVE-2012-4850: Improper Input Validation

IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors...