CVE-2011-3569

Technical details about CVE-2011-3569 are not provided in the connected documents. The entries repeat an unspecified remote information disclosure against Oracle Fusion Middleware Web Services Manager; monitor Oracle advisories for patch information.

CVE-2011-3531

CVE-2011-3531 affects Oracle Fusion Middleware’s Oracle Web Services Manager in versions 11.1.1.3, 11.1.1.4, and 11.1.1.5. The vulnerability is described as unspecified with impact to availability via unknown vectors related to Web Services Security. The connected documents confirm the affected p...

CVE-2011-3568

CVE-2011-3568 affects Oracle Fusion Middleware’s Oracle Web Services Manager component (versions 11.1.1.3, 11.1.1.4, 11.1.1.5). The vulnerability is described as unspecified and involves remote authenticated users impacting confidentiality and integrity via unknown vectors related to Web Services...

CVE-2011-3568

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security...

UniOFuzz 0.1.2-beta - Universal fuzzing tool Released

UniOFuzz 0.1.2-beta - Universal fuzzing tool Released UniOFuzz version 0.1.2-beta - the universal fuzzing tool for browsers, web services, files, programs and network services/ports released by nullsecurity team. Video Demonstration: pigtail23, Developer of UniOFuzz demonstrated the tool in above...

IBM WebSphere Application Server z/OS跨站脚本和未明漏洞

IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS存在安全漏洞，允许攻击者进行跨站脚本和其他攻击。 1以JAX-RPC SW-Security装载类时存在WSEC5007E错误。 2传递给WEB消息组件的未明输入在返回用户之前缺少过滤，可导致跨站脚本攻击，可获得敏感信息或劫持用户会话。 0 IBM WebSphere Application Server for z/OS...

CVE-2011-1377

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

Code injection

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

CVE-2011-1377

CVE-2011-1377 affects IBM WebSphere Application Server with WS-Security enabled. IBM and NVD sources describe a weakness where a WS‑Security/LTPA token handling flaw can allow a user to gain elevated privileges, potentially via identity reuse between inbound/outbound tokens. Affected versions inc...

CVE-2011-1377

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

Ox Design Web Services SQL Injection

Exploit Title: Ox Design Web Services SQL Injection Vulnerability Google Dork: intext:"Powered by Ox Design Web Services" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.oxdesign.gr Version: All Version Category:: webapps Securit...

Oracle WebLogic Server Web Services Security Policy not Enforced (CVE-2008-5459)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified vulnerability that could allow a remote, unauthenticated attacker to disable enforcement of security policies for the web services. Such an attack could have a...

[SECURITY] Fedora 15 Update: libsocialweb-0.25.20-1.fc15

libsocialweb is a social data server which fetches data from the "social we b", such as your friend's blog posts and photos, upcoming events, recently play ed tracks, and pending eBay auctions. It also provides a service to update your status on web services which support it, such as MySpace and...

[SECURITY] Fedora 15 Update: rest-0.7.12-1.fc15

This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of servic es don't actually adhere to this strict definition. Instead, their RESTful e...

[SECURITY] Fedora 16 Update: libsocialweb-0.25.20-1.fc16

libsocialweb is a social data server which fetches data from the "social we b", such as your friend's blog posts and photos, upcoming events, recently play ed tracks, and pending eBay auctions. It also provides a service to update your status on web services which support it, such as MySpace and...

[SECURITY] Fedora 16 Update: rest-0.7.12-1.fc16

This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of servic es don't actually adhere to this strict definition. Instead, their RESTful e...

Tor Project Sets Up Cloud Bridge Project on Amazon EC2

The Tor Project has started a new system designed to help people start and run Tor bridges in the cloud using Amazon’s EC2 platform. The Tor Cloud runs on Amazon’s new micro-instance tier that lets people run instances for free for the first year. Tor is used by people around the world to help...

USN-1263-1: IcedTea-Web, OpenJDK 6 vulnerabilities

Deepak Bhole discovered a flaw in the Same Origin Policy SOP implementation in the IcedTea web browser plugin. This could allow a remote attacker to open connections to certain hosts that should not be permitted. CVE-2011-3377 Juliano Rizzo and Thai Duong discovered that the block-wise AES...

Cisco Unified Communications Manager / Cisco Unified Contact Center Express directory traversal

Directory traversal in embedded web services on TCP/8080 and TCP/9080 ports...

Critical: java-1.6.0-openjdk

Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...