380 matches found
CVE-2010-0449
CVE-2010-0449 is an XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64. The issue allows remote attackers to inject arbitrary script/HTML via unknown vectors, potentially affecting systems running HP SOA Registry Foundation on supported platforms. The related RedHat/HP security documen...
CVE-2010-0448
CVE-2010-0448 affects HP SOA Registry Foundation v6.63 and v6.64. Root cause details are not fully disclosed in the provided documents, but HP’s Security Bulletin (HPSBMA02490) notes remote unauthorized access to data, cross-site scripting, and privilege escalation. Affected versions include HP S...
[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02037890 Version: 1 HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting XSS, Privilege Escalation NOTICE: The information in this...
HP SOA Registry Foundation multiple security vulnerabilities
Crossite scripting, code execution, privilege escalation...
dns-zone-transfer NSE Script
Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain script argument. If the query is...
VirtueMart 'product_id' Parameter SQL Injection Vulnerability
No description provided by source. Bugtraq ID: 37317 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: SOA Crew a.k.a Neo-GabrieL Vulnerable: VirtueMart VirtueMart 1.0 VirtueMart is prone to an SQL-injection vulnerability...
VirtueMart - 'Product_ID' SQL Injection
Bugtraq ID: 37317 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: SOA Crew a.k.a Neo-GabrieL Vulnerable: VirtueMart VirtueMart 1.0 VirtueMart is prone to an SQL-injection vulnerability because it fails to sufficiently...
Joomla Virtuemart SQL Injection
Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...
Joomla! Component com_virtuemart 1.0 - Product_ID SQL Injection
Joomla! Component comvirtuemart 1.0 - ProductID SQL Injection Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/...
Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection
Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Microsoft DNS Server Internal Hostname Disclosure Detection
Microsoft DNS server might be prone to an internal hostname disclosure. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
djbdns dnscache SOA请求远程缓存中毒漏洞
BUGTRAQ ID: 33818 CVECAN ID: CVE-2008-4392 djbdns是一个由Qmail的作者所设计的轻量级DNS server。 djbdns的dnscache服务组件没有正确地处理SOA记录，如果远程攻击者持续的向服务器发送大量的SOA请求和伪造回复，就会增加DNS缓存投毒攻击的成功概率。 D. J. Bernstein djbdns 1.05 厂商补丁： D. J. Bernstein --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Code injection
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...
CVE-2008-4392
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...
CVE-2008-4392
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...
Digital Security Research Group [DSecRG] Advisory #DSECRG-09-001
Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...
Oracle Application Server (SOA) — Linked XSS vulnerability
Application:Oracle Application ServerSOA Versions Affected:Oracle Application ServerSOA version 10.1.3.1.0 Vendor URL: http://oracle.com Bugs:Multiple XSS Exploits: YES Reported: 10.01.2008 Vendor response:11.01.2008 Date of Public Advisory:13.01.2009 CVE: CVE-2008-4014 Description: XSS IN...