CVE-2012-1655

Unspecified vulnerability in the UC PayDutchGroup / WeDeal payment module 6.x-1.0 for Drupal allows remote authenticated users to obtain account credentials via unknown attack vectors...

CVE-2012-1655

CVE-2012-1655 affects the UC PayDutchGroup / WeDeal payment module (Drupal 6.x-1.0). The Drupal SA confirms information leakage: a malicious user who has an account and can checkout can login to the PayDutchGroup site as the store owner and obtain/manage the store owner’s credentials via scenario...

CVE-2012-3060

CVE-2012-3060 affects Cisco Unity Connection (UC) versions 8.6, 9.0, and 9.5. The vulnerability allows remote attackers to cause a denial of service by sending malformed UDP packets, leading to CPU consumption. The underlying cause is malformed UDP handling in UC that triggers high CPU usage. Pub...

CVE-2012-3096

Cisco Unity Connection (UC) versions 7.1, 8.0, and 8.5 are affected by CVE-2012-3096. The advisory states that remote authenticated users can trigger a denial of service (resource consumption and administration outage) through extended use of the product, identified as Bug ID CSCtd79132. The avai...

CVE-2012-4259

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

Cross site scripting

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

CVE-2012-4259

CVE-2012-4259 affects C4B XPhone Unified Communications UC, specifically the XPhone UC Web/ web frontend for XPhone Virtual Directory (2011 Web 4.1.890S R1). The vulnerability is a cross-site scripting (XSS) issue allowing remote attackers to inject arbitrary script via the company name in the Co...

CVE-2012-4259

Cross-site scripting XSS vulnerability in the contacts in 1 XPhone UC Web and the 2 web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications UC 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these detai...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstarkste Telefonie- und...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstarkste Telefonie- und...

C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability

Exploit for asp platform in category web applications Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und Kommunikationslösung von C4B. Sie ist leicht zu bedienen und...

C4B XPhone UC Web 4.1.890S R1 - Cross-Site Scripting

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Document Title: =============== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=484 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 48...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Document Title: =============== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=484 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 48...

perl multiple security vulnerabilities

Data injection and protection bypass in lc, lcfirst, uc, ucfirst functions and CGI module...

Ubuntu: Security Advisory (USN-1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Discuz! 1.5 跨站脚本攻击

简要描述： UC登陆页面存在跨站漏洞 详细说明： http://www.eisdl.com/bbs/ucserver/admin.php?m=user&a=login&iframe=&sid='%22%3E%3Ciframe%20src=http://www.pker.in%3E 漏洞证明： http://www.eisdl.com/bbs/ucserver/admin.php?m=user&a=login&iframe=&sid='%22%3E%3Ciframe%20src=http://www.pker.in%3E...

Study Finds Popular Sites Guilty of Hi-Jacking History

A recent study launched by the UC San Diego Department of Computer Science to determine the scope of privacy-violating information flows at popular websites shows that popular Web 2.0 applications such as mashups, aggregators, and sophisticated ad targeting are teeming with various kinds of...

Discuz! 7.2 the following versions and various uc products api interface to Get webshell vulnerability-vulnerability warning-the black bar safety net

For dz, we are more concerned about is to get the shell, but the dz stuff want to take the shell too hard too difficult, on an article at the end of the bedding the next, so this article is also not on the horse after cannon....this vulnerability has been in the discuz! x1 version quietly give up...

More than 160,000 affected by data breach at UC Berkeley

Hackers had access to a database for about six months at the University of California at Berkeley and stole health-related data on more than 160,000 students and other people who used the school’s health services center. College officials said that the attack on the health center’s database was...