4978 matches found
PT-2013-4286
Name of the Vulnerable Software and Affected Versions SAP Netweaver version 7.03 Description The issue allows remote attackers to obtain sensitive information via a crafted SOAP request to the "TCP port 1128" endpoint, specifically targeting the GetComputerSystem method in the HostControl service...
CVE-2013-3319: Exposure of Sensitive Information to an Unauthorized Actor
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
[IronWASP v0.9.6.5] Open Source Advanced Web Security Testing Platform
IronWASP Iron Web application Advanced Security testing Platform is an open source system for web application vulnerability testing. It is designed to be customizable to the extent where users can create their own custom security scanners using it. Though an advanced user with Python/Ruby scripti...
Hewlett-Packard SiteScope SOAP Call runOMAgentCommand Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within APIBSMIntegrationImpl's processing of the runOMAgentCommand which can be invoked through...
Oracle Endeca Server attachDataStore SOAP Request Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the controlSoapBinding web service. This service exposes...
Oracle Endeca Server createDataStore SOAP Request Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the controlSoapBinding web service. This service exposes...
HP SiteScope code execution
Code execution via SOAP...
[security bulletin] HPSBGN02904 rev.1 - HP SiteScope running SOAP, Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03861260 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03861260 Version: 1 HPSBGN02904 rev....
SuSE 11.2 Security Update : PHP5 (SAT Patch Number 8086)
The following security issues have been fixed : - bnc828020:. CVE-2013-4635 - Integer overflow in SdnToJewish - bnc807707:. CVE-2013-1635 / CVE-2013-1643 - reading system files via untrusted SOAP input - soap.wsdlcachedir function did not honour PHP openbasedir - bnc829207:. CVE-2013-4113 - heap...
vtiger CRM <= 5.4.0 (SOAP Services) - Multiple Vulnerabilities
Exploit for php platform in category web applications 1 The vulnerable code is located in the getlistvalues SOAP method defined in /soap/customerportal.php: 1528. function getlistvalues$id,$module,$sessionid,$onlymine='true' 1529. 1530. requireonce'modules/'.$module.'/'.$module.'.php'; 1531...
vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities
vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities --------------------------------------------------------------------------------- vtiger CRM debug"Entering customer portal function getlistvalues"; 2 The vulnerable code is located in the getprojectcomponents SOAP method defined in...
HP SiteScope Multiple Unspecified Remote Code Execution Vulnerabilities
The version of HP SiteScope installed on the remote host is potentially affected by the following code execution vulnerabilities : - Unspecified errors exist related to SOAP functionality for which no further details have been provided. CVE-2013-2367 - An error exists related to handling the SOAP...
vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities
--------------------------------------------------------------------------------- vtiger CRM debug"Entering customer portal function getlistvalues"; 2 The vulnerable code is located in the getprojectcomponents SOAP method defined in /soap/customerportal.php: 2778. function...
Design/Logic Flaw
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...
CVE-2013-2367
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...
CVE-2013-2367
CVE-2013-2367 concerns HP SiteScope (versions 11.20/11.21) with a vulnerability in the SOAP interface, allowing remote code execution via the runOMAgentCommand SOAP path. Connected sources confirm an RCE vector related to the SOAP handling and the runOMAgentCommand entry, with multiple references...
PT-2013-3702
Name of the Vulnerable Software and Affected Versions HP SiteScope versions 11.20 through 11.21 Description The issue allows remote attackers to execute arbitrary code via unknown vectors when SOAP is used. Recommendations For HP SiteScope versions 11.20 through 11.21, at the moment, there is no...
CVE-2013-2367: Undefined Security Weakness
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...
OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection / Stored XSS
Exploit for jsp platform in category web applications import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file...