CVE-2013-7105

Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."...

CVE-2013-7105

Buffer overflow in the Interstage HTTP Server log function ihsrlog/rotatelogs affects Fujitsu Interstage Application Server (versions 9.0.0, 9.1.0, 9.2.0, 9.3.1, 10.0.0) and Interstage Studio (9.0.0, 9.1.0, 9.2.0, 10.0.0). The vulnerability in the log component could allow an attacker to execute ...

CVE-2013-7105

Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."...

CVE-2013-5042

Cross-site scripting XSS vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS...

CVE-2013-5042

Cross-site scripting XSS vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS...

CVE-2013-5042

CVE-2013-5042 is a cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x (before 1.1.4) and 2.0.x (before 2.0.1), and in Visual Studio Team Foundation Server 2013. The weakness allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport...

Microsoft VS Team Foundation Server SignalR XSS Vulnerability (2905244)

This host is missing an important security update according to Microsoft Bulletin MS13-103. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

InduSoft Advantech Studio Directory Traversal

OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-13-004-01—Advantech Studio Directory Traversal that was published January 4, 2013, on the ICS-CERT Web page. Independent researcher Nin3 released proof-of-concept PoC exploit code for a directory traversal vulnerability in Induso...

Microsoft ASP.NET SignalR CVE-2013-5042 Cross Site Scripting Vulnerability

Description Microsoft ASP.NET SignalR is prone to a cross-site scripting vulnerability because it fails to properly encode user input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could allow...

MS13-103: Description of the security update for Microsoft Visual Studio Team Foundation Server 2013: December 10, 2013

None None...

CVE-2013-3921

Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash to the default URI...

Directory traversal

Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash to the default URI...

CVE-2013-3921

CVE-2013-3921 affects Easytime Studio Easy File Manager 1.1 for iOS. It is a directory traversal vulnerability that allows remote attackers to read arbitrary files by sending a request with an encoded dot-dot path (..%2f) to the default URI. Impact listed in sources indicates partial confidential...

CVE-2013-3921

Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash to the default URI...

TOSHIBA e-Studio 232/233/282/283 - Cross-Site Request Forgery (Change Admin Password)

Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists - 0day exploit Password must be minim...

TOSHIBA e-Studio 232233282283 - Cross-Site Request Forgery (Change Admin Password)

TOSHIBA e-Studio 232233282283 - Cross-Site Request Forgery Change Admin Password Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232...

Toshiba e-Studio Cross Site Request Forgery

Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists - 0day exploit Password must be minim...

Schneider Electric InduSoft Web Studio Arbitrary Script Execution

Binary data scadaindusoftwebstudioscriptexecution.nbin...

InduSoft ISSymbol ActiveX Control Buffer Overflow (Update A)

Overview Security researcher Dmitriy Pletnevo of Secunia ResearchSecunia Research, http://secunia.com/secuniaresearch/2011-36/, website last accessed June 16, 2011. has released details of multiple overflow vulnerabilities affecting the InduSoft ISSymbol ActiveX control. The researcher identified...