2925 matches found
Adobe Starts Vulnerability Disclosure Program on HackerOne
Update: Adobe is the latest tech vendor to begin a vulnerability disclosure program, but it seems they’re limping in at the outset. The program launched this week on the HackerOne platform, but there are no cash incentives being offered and certain Adobe products are not in scope for researchers...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Dimofinf 3.0 New Cookie Based Injection Exploit
Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...
Microsoft Office Web Apps Remote Code Execution Vulnerability (3032328)
This host is missing an important security update according to Microsoft Bulletin MS15-012. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
SSRF vulnerability of the mining experience-the vulnerability warning-the black bar safety net
SSRF overview SSRFServer-Side Request Forgery:server side request forgery is a by the attacker structure is formed by the service terminal initiating the request of a security vulnerability. Under normal circumstances, the SSRF attack the target from outside the network cannot access the internal...
UFONet Open Redirect DDoS Attack
UFONet – is a tool designed to launch DDoS attacks against a target, using ‘Open Redirect’ vectors on third party web applications, like botnet. See this links for more info: CWE-601:Open Redirect OWASP:URL Redirector Abuse Installing UFONet UFONet runs on many platforms. It requires Python 2.x.y...
Wary of the Ghost vulnerability in the butterfly effect granted Server Permissions-bug warning-the black bar safety net
Recently everyone is concerned about the Ghost vulnerability, CNNVD-2 0 1 5 0 1-6 5 8, In addition to in clockdiff, and procmail, and exim and other applications on the discovered vulnerabilities, yesterday security personnel found to have spread to the common on the web application, such as the...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Oracle E-Business Multiple Vulnerabilities (January 2015 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - Oracle Application Object Library - Oracle Applications DBA - Oracle Applications DBA - Oracle...
Unspecified Vulnerability in Oracle Access Manager Integration with OAM Subcomponent
Oracle Access Manager is security infrastructure software that helps organizations manage secure access to enterprise Web applications within and across business-to-business B2B value chains. A security vulnerability exists in the Oracle Access Manager Integration with OAM child that could be...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Web Applications Desktop Integrator Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Web Applications Desktop Integrator component that could be exploited by remote attackers to compromise system integrity...
CVE-2014-6525
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Templates...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Templates...
CVE-2014-6525
The CVE-2014-6525 entry concerns Oracle E-Business Suite’s Web Applications Desktop Integrator component. Affected products/versions include Oracle E-Business Suite 11.5.10.2 and 12.x releases (12.0.6, 12.1.3, 12.2.2–12.2.4). The vulnerability is described as unspecified and affects integrity via...
[SECURITY] Fedora 20 Update: gd-2.1.0-8.fc20
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
[SECURITY] Fedora 21 Update: gd-2.1.0-8.fc21
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
[ANN] Apache Struts 2.3.20 GA release available with security fix
The Apache Struts group is pleased to announce that Apache Struts 2.3.20 is available as a "General Availability" release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is...