CVE-2014-5231

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors...

CVE-2014-5231

Siemens SIMATIC WinCC Sm@rtClient for iOS (pre-1.0.2) is affected by CVE-2014-5231. The issue stems from Insufficiently Protected Credentials (CWE-522): the app stores its password in storage in a way that could allow a local attacker with physical access to extract it. The ICS advisory notes loc...

SUSE-SU-2015:0928-1 Recommended update for sm-ncc-sync-data

This update for sm-ncc-sync-data contains the following changes: Add SUSE Cloud 4 channels. bnc883057 Fix parent label of the LTSS channel for SLMS...

CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2013-6222

CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...

CVE-2011-4515

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

Design/Logic Flaw

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

CVE-2011-4515

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

Cisco IOS 15.x组播源发现协议远程拒绝服务漏洞

BUGTRAQ ID: 52759 CVE ID: CVE-2012-0382 MSDP是用于连接多个PIM-SM域的协议，允许一个组的组播源让不同域内的所有RP知悉。 从外部MSDP配置的对等路由器接收到包含压缩的IGMP数据的MSDP报文时，可造成受影响设备重载。如果该路由器明确的加入了组播组，才可利用此漏洞。MSDP报文目标地址是单一传播，可发往受影响设备上的任何IP地址，包括回送地址。通行报文不会触发此漏洞。 0 Cisco IOS 15.x 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20120328-msdp）以及相应补丁:...

cPanel 11.x (Fantastico) Local File Include / SM-b0x

Exploit for php platform in category web applications cPanel 11.x Fantastico Local File Include / SM-b0x ////\ //\ //\ //\ //\ //\ //\ //\ //\ :::/\ ::\:.\ \::\ \ \ \ :\ \ ::: \ \::: \ \::\ \:::/ /: / \:::/ ::/\ .\ \ //\:\ \ :: \ \:: /:/ /: / /::/ /\/\:: ::\ \::::/ :...

DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities

Document Title: =============== DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2011-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 70...

DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities

Document Title: =============== DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2011-07-28 Vulnerability Laboratory ID VL-ID: ==================================== 70...

Dawaween V 1.03 SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Dawaween V 1.03 SQL Injection Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Textpattern CMS 4.2.0 Remote File Inclusion

Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : [email protected] + Inj3ct0r Team Hacker + 28-8-201...

Multiple Web Browser Clickjacking Vulnerability (FF3.6.7/SM 2.0.6)

. Mozilla Firefox 3.6.7 & SeaMonkey 2.0.6 Waiting for patch htmlhead meta http-equiv="content-type" content="text/html; charset=UTF-8" titleFF3.6.7/SM 2.0.6 ClickJacking Vulnerability/title /headbody div id="mydiv" onmouseover="document.location='http://www.mozilla.org';" style="border: 0px none ...

phpYellow Shell Upload Vulnerability

No description provided by source. ======================================================================================== | Title : phpYellow Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 ...