EUVD-2006-4429

Malware in sbrugna...

EUVD-2018-7405

Malware in sbrugna...

EUVD-2007-1765

Malware in sbrugna...

CVE-2022-28620

CVE-2022-28620 is a remote authentication bypass affecting HPE Cray Legacy Shasta System Solutions, HPE Slingshot, and HPE Cray EX supercomputers. Affected firmware/versions include: node controller firmware for HPE Cray EX liquid-cooled blades; chassis controller firmware in HPE Cray EX liquid-c...

HPESBCR04284 rev.1 - HPE Cray EX Supercomputers, Cray Shasta System Solutions, and HPE Slingshot Switches, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Cray Legacy Shasta System Solutions - All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

SQL Injection Vulnerability in Network Video Surveillance System of Tianmai Technology

Zhengzhou Tianmai Technology Co., Ltd. was founded in 2004, is located in Zhengzhou City, National High-tech Industrial Development Zone, is specializing in public transportation intelligent system solutions provider, is the "city intelligent bus solutions" and "3G/4G video, Beidou/GPS monitoring...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-45218)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited, which can be exploited by attackers to obtain sensitive...

Cross site scripting

Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...

CVE-2018-15528

Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...

CVE-2018-15528

CVE-2018-15528 affects the Java System Solutions SSO plugin for BMC MyIT (version 4.0.13.1). The issue is a reflected XSS in the select_sso() function, where a victim loading a crafted /ux/jss-sso/arslogin?... link and pressing Login can cause client-side scripts to run. The vulnerability enables...

Java System Solutions SSO plugin for BMC MyIT Cross Site Scripting Vulnerability

Java System Solutions SSO plugin for BMC MyIT is a single-sign-on plugin for BMC MyIT from Java System Solutions, UK. A cross-site scripting vulnerability exists in Java System Solutions SSO plugin for BMC MyIT version 4.0.13.1. A remote attacker can exploit this vulnerability to inject client-si...

BMC MyIT Java System Solutions SSO Plugin 4.0.13.1 Cross Site Scripting Vulnerability

Exploit for java platform in category web applications Title: ====== Reflected XSS in Java System Solutions SSO Plugin 4.0.13.1 for BMC MyIT Description: ============ Reflected Cross-Site Scripting in Java System Solutions' BMC MyIT SSO Plugin version 4.0.13.1 was identified during a penetration...

Java System Solutions SSO Plugin For BMC MyIT 4.0.13.1 Cross Site Scripting

Title: ====== Reflected XSS in Java System Solutions SSO Plugin 4.0.13.1 for BMC MyIT Description: ============ Reflected Cross-Site Scripting in Java System Solutions' BMC MyIT SSO Plugin version 4.0.13.1 was identified during a penetration test. Other versions might be affected as well. A remot...

Remote file inclusion

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

CVE-2007-1771 : Concrete details from multiple sources show a PHP remote file inclusion in Ay System Solutions Web Content System (WCS) 2.7.1. The vulnerability occurs in manage/javascript/formjavascript.php, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the path[J...

CVE-2006-4440

CVE-2006-4440 describes a PHP remote file inclusion vulnerability in Ay System Solutions CMS (main.php) versions 2.6 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the path[ShowProcessHandle] parameter. The evidence is drawn from the NVD/CVE reco...

CVE-2006-4441

The CVE-2006-4441 entry documents remote PHP code execution via PHP remote file inclusion in Ay System Solutions CMS

Ay System Solutions CMS <= v2.6 (main.php) Remote File Inclusion Exploit

============================================================================================== Ay System Solutions CMS = v2.6 main.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor...

Ay System CMS 2.6 - main.php Remote File Inclusion

Ay System CMS 2.6 - main.php Remote File Inclusion ============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit :...