Four Oracle Demantra Security Vulnerabilities Found

Oracle’s Demantra, part of the company’s Value Chain Planning suite of software, is fraught with vulnerabilities according to several bug disclosures issued over the weekend. Researchers at the London-based computer security firm Portcullis claim the application is plagued by a four vulnerabiliti...

SpagoBI 4.0 - Arbitrary Cross-Site Scripting / Arbitrary File Upload

Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2 Base Score: 4 CVSS v2 Vector:...

Drupal Project Issue File Review模块HTML注入漏洞

Bugtraq ID:65830 Drupal是一套开放源码的内容管理平台。 Drupal Project Issue File Review存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Drupal Project Issue File Review 6.x-2.0 厂商补丁： Drupal ----- Drupal Project Issue File Review 6.x-2.17已经修复该漏洞，建议用户下载更新： http://drupal.org/project/projectissuefilerev...

Cisco Unified Communications Domain Manager多个跨站脚本漏洞

Bugtraq ID:65869 CVE ID:CVE-2014-2104 Cisco Unified Communications Manager是思科统一通信解决方案中强大的呼叫处理组件。 Cisco Unified Communications Manager WEB接口BVSM页不正确校验多个参数数据，允许远程攻击者构建恶意URI，诱使用户解析，当恶意数据被查看时可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Cisco Unified Communications Domain Manager 目前没有详细解决方案提供： http://www.cisco.com...

SpagoBI 4.0 - Arbitrary Cross-Site Scripting Arbitrary File Upload

SpagoBI 4.0 - Arbitrary Cross-Site Scripting Arbitrary File Upload 01. Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE...

Slack: State parameter missing on google OAuth

Hi, State parameter i.e anti-csrf token to prevent session hijacking attacks is missing on Google OAuth i.e...

SpagoBI 4.0 Cross Site Scripting / Shell Upload

Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2 Base Score: 4 CVSS v2 Vector:...

Oracle Demantra 12.2.1 - Persistent Cross-Site Scripting

Details: The TaskSender area is vulnerable to a stored cross-site scripting vulnerability. Impact: An attacker could exploit this flaw to get active HTML or script code executed in an authenticated user’s browser. Cross-site Scripting may be used to perform attacks such as session hijacking by...

Oracle Demantra 12.2.1 - Persistent Cross-Site Scripting

Oracle Demantra 12.2.1 - Persistent Cross-Site Scripting Details: The TaskSender area is vulnerable to a stored cross-site scripting vulnerability. Impact: An attacker could exploit this flaw to get active HTML or script code executed in an authenticated user’s browser. Cross-site Scripting may b...

Oracle Demantra 12.2.1 - Stored XSS Vulnerability

Exploit for windows platform in category web applications Details: The TaskSender area is vulnerable to a stored cross-site scripting vulnerability. Impact: An attacker could exploit this flaw to get active HTML or script code executed in an authenticated user’s browser. Cross-site Scripting may ...

RelateIQ: Value of JSESSIONID and XSRF token parameter in cookie remains same before and after login

Here are two same values captured via intercepting the request and the value of JSESSIONID and XSRF remains same before and after login JSESSIONID=m8u0pm8mjvckm1ya8da4oqlfb0pd34iw38lr; XSRF-TOKEN=6B025F41D13BC02E9D658409BAC23F84; This could lead to further threats such as session hijacking etc...

WordPress Thank You Counter Button多个跨站脚本漏洞

Bugtraq ID:65805 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Thanks You Counter Button插件不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Thanks You Counter Button 1.8.7 目前没有详细解决方案提供： http://wordpress.org/plugins/...

WordPress Easy Media Gallery多个跨站脚本漏洞

Bugtraq ID:65804 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress EasyMedia Gallery插件不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress EasyMedia Gallery 1.2.29 目前没有详细解决方案提供： http://wordpress.org/plugins/...

Apache Tomcat security restrictions bypass Vulnerability(CVE-2 0 1 3-4 2 8 6)-vulnerability warning-the black bar safety net

Affected system: Apache Group Tomcat 8.0.0-RC1 - 8.0.0-RC5 Apache Group Tomcat 7.0.0 - 7.0.47 Apache Group Tomcat 6.0.0 - 6.0.37 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 6 5 7 7 3 CVECAN ID: CVE-2 0 1 3-4 2 8 6 Apache Tomcat is a...

Apache Tomcat 安全限制绕过漏洞

BUGTRAQ ID: 65773 CVECAN ID: CVE-2013-4286 Apache Tomcat是一个流行的开源JSP应用服务器程序。 Tomcat 8.0.0-RC1 - 8.0.0-RC5、7.0.0 - 7.0.47、6.0.0 - 6.0.37版本存在漏洞CVE-2005-2090修复不完整问题，远程攻击者可利用此漏洞对Web缓存投毒、逃避IDS签名、启动跨站脚本、HTML注入、会话劫持攻击等。 0 Apache Group Tomcat 8.0.0-RC1 - 8.0.0-RC5 Apache Group Tomcat 7.0.0 - 7.0.47 Apache...

Blackboard Learn未明跨站脚本漏洞

CVE ID:CVE-2014-0811 Blackboard Learn是一个集网络教学、数字资源管理、在线视频课堂和学习社区诸功能为一体的应用。 Blackboard Learn不正确过滤用户提交的输入，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Blackboard Learn 8.0 Service Pack 6 厂商补丁： Blackboard ----- 用户可联系厂商获得相应的升级或补丁程序： http://www.blackboard.com/Platforms/Learn/Overview.aspx...

HP Service Manager多个安全漏洞

CVE ID:CVE-2013-1493、CVE-2013-2067、CVE-2013-6202 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager存在多个安全漏洞： 1，不正确过滤返回给用户的输入，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 2，应用程序存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 3，存在未明错误，允许攻击者利用漏洞执行任意代码，目前没有详细漏洞细节提供。...

Barracuda Networks Backup - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks Backup - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=784 BARRACUDA NETWORK SECURITY ID: BNSEC-885 Release Date: ============= 2014-02-25 Vulnerability Laboratory ID VL-ID...

IBM Rational Focal Point未明多个安全漏洞

CVE ID:CVE-2014-0839、CVE-2014-0840、CVE-2014-0842、CVE-2014-0843、CVE-2014-0853 IBM Rational Focal Point是IBM Rational基于Web的产品管理系统，内置了面向客户和市场的产品管理流程，提供产品管理过程中的工作流自动化、信息相关性分析、信息统计分析以及信息的优先级分析功能。 IBM Rational Focal Point存在多个安全漏洞： 1，不正确过滤部分用户输入，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。...

Jenkins < 1.551 / 1.532.2 and Jenkins Enterprise 1.509.x / 1.532.x < 1.509.5.1 / 1.532.2.2 Multiple Vulnerabilities

The remote web server hosts a version of Jenkins or Jenkins Enterprise that is affected by multiple vulnerabilities : - A flaw in the default markup formatter allows cross-site scripting via the Description field in the user configuration. CVE-2013-5573 - A security bypass vulnerability allows...