CVE-2010-0448

CVE-2010-0448 affects HP SOA Registry Foundation v6.63 and v6.64. Root cause details are not fully disclosed in the provided documents, but HP’s Security Bulletin (HPSBMA02490) notes remote unauthorized access to data, cross-site scripting, and privilege escalation. Affected versions include HP S...

[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02037890 Version: 1 HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting XSS, Privilege Escalation NOTICE: The information in this...

CVE-2010-0450: Undefined Security Weakness

Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-0449: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

HP SOA Registry Foundation multiple security vulnerabilities

Crossite scripting, code execution, privilege escalation...

CVE-2010-0448: Undefined Security Weakness

Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors...

dns-zone-transfer NSE Script

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain script argument. If the query is...

VirtueMart 'product_id' Parameter SQL Injection Vulnerability

No description provided by source. Bugtraq ID: 37317 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: SOA Crew a.k.a Neo-GabrieL Vulnerable: VirtueMart VirtueMart 1.0 VirtueMart is prone to an SQL-injection vulnerability...

VirtueMart - 'Product_ID' SQL Injection

Bugtraq ID: 37317 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: SOA Crew a.k.a Neo-GabrieL Vulnerable: VirtueMart VirtueMart 1.0 VirtueMart is prone to an SQL-injection vulnerability because it fails to sufficiently...

Joomla Virtuemart SQL Injection

Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...

Joomla! Component com_virtuemart 1.0 - Product_ID SQL Injection

Joomla! Component comvirtuemart 1.0 - ProductID SQL Injection Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/...

Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection

Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure

+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...

Cisco ACE XML Gateway 6.0 - Internal IP Disclosure

Cisco ACE XML Gateway 6.0 - Internal IP Disclosure +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Microsoft DNS Server Internal Hostname Disclosure Detection

Microsoft DNS server might be prone to an internal hostname disclosure. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

djbdns dnscache SOA请求远程缓存中毒漏洞

BUGTRAQ ID: 33818 CVECAN ID: CVE-2008-4392 djbdns是一个由Qmail的作者所设计的轻量级DNS server。 djbdns的dnscache服务组件没有正确地处理SOA记录，如果远程攻击者持续的向服务器发送大量的SOA请求和伪造回复，就会增加DNS缓存投毒攻击的成功概率。 D. J. Bernstein djbdns 1.05 厂商补丁： D. J. Bernstein --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

CVE-2008-4392

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

CVE-2008-4392

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

CVE-2008-4392: Concurrent Execution using Shared Resource with Improper Synchronization

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...