388 matches found
Authentication flaw
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...
CVE-2011-0377
Cisco TelePresence endpoint devices running software 1.2.x–1.6.x are affected by CVE-2011-0377 due to a malformed SOAP request combined with a spoofed TelePresence Manager that provides an invalid IP address, causing a denial of service (service crash). The linked Cisco PSIRT advisory details tha...
CVE-2011-0380
CVE-2011-0380 affects Cisco TelePresence Manager versions 1.2.x–1.6.x. The issue is a SOAP authentication bypass: a malformed SOAP request can allow a remote, unauthenticated attacker to invoke arbitrary SOAP methods, potentially compromising the device. The Cisco advisory notes three related vul...
CVE-2011-0377
Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service service crash via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605...
CVE-2010-4416
Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims...
Buffer overflow
Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims...
CVE-2010-4416
CVE-2010-4416 concerns Oracle GoldenGate Veridata Server (Oracle Fusion Middleware 3.0.0.4). The connected advisories describe a buffer/boundary overflow in the server when parsing XML SOAP requests containing an overly long tag string. This flaw can allow a remote attacker to execute arbitrary c...
CVE-2010-3984
Buffer overflow in mngcorecom.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability RHA r15.0 SP1 allows remote...
Buffer overflow
Buffer overflow in mngcorecom.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability RHA r15.0 SP1 allows remote...
CA ARCserve D2D r15 - Web Service Servlet Code Execution
CA ARCserve D2D r15 - Web Service Servlet Code Execution Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server...
Microsoft SharePoint畸形SOAP请求远程代码执行漏洞(MS10-104)
BUGTRAQ ID: 45264 CVE ID: CVE-2010-3964 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Sharepoint实现上存在漏洞，远程攻击者可以利用此漏洞通过请求注入命令到服务器上执行。 此漏洞源于处理发送到Document Conversions Launcher服务的SOAP请求时出现验证错误，可通过上传的特制请求导致在受影响的服务器上执行任意命令。 Microsoft SharePoint Server 厂商补丁： Microsoft ---------...
Unrestricted file upload
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...
CVE-2010-3964
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...
Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability
Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the privileges of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition. Technologies...
CA XOsoft buffer overflow
Buffer overflow on SOAP request parsing...
SAP BusinessObjects Version Detection
This module simply attempts to identify the version of SAP BusinessObjects. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP BusinessObjects Version Detection', 'Description' = 'This module...
SAP NetWeaver Composition Environment sapstartsrv.exe Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP NetWeaver Composition Environment. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sapstartsrv.exe process which listens by default on ports...
Computer Associates XOsoft SOAP Request Username Enumeration (CA20100406)
The remote web server is a component of XOsoft, a product from Computer Associates for combined business continuity and disaster recovery. The installed version of this service does not require authentication when handling SOAP requests to enumerate user names. An unauthenticated, remote attacker...