3481 matches found
Moodle 2.8.x < 2.8.6 Multiple Vulnerabilities
Binary data 9425.prm...
Unspecified Vulnerability in Oracle Supply Chain Products Suite
Oracle Agile Engineering Data Management is a set of asset organization and management solutions from Oracle Corporation, of which Oracle Supply Chain Products Suite is a supply chain solution. An unspecified vulnerability exists in the Web Services Security subcomponent of Oracle Supply Chain...
Drupal RESTWS Module Page Callback RCE
The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the bundled RESTful Web services RESTWS module due to a flaw in how default page callbacks for Drupal entities are altered when handling specially crafted requests. An unauthenticated,...
Drupal RESTful Web Services RCE
Remote Code Execution in Drupal RESTful Web Services module Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
3 Popular Drupal Modules Found Vulnerable — Patch Released
Just yesterday, I wrote a warning article announcing that Drupal – the popular open source content management system – will release patches for several highly critical Remote Code Execution RCE bugs that could allow attackers to fully take over any affected site. Below are the three separate Drup...
Drupal Patches Three Remote Code Execution Vulnerabilities in Modules
Developers with the open source content management framework Drupal today patched a series of highly critical remote code execution bugs in three separate modules. If exploited, the bugs could let an attacker take over any site running the modules. Fixes for pushed for RESTful Web Services, a...
RESTWS - Highly critical - Remote code execution - SA-CONTRIB-2016-040
This module enables you to expose Drupal entities as RESTful web services. RESTWS alters the default page callbacks for entities to provide additional functionality. A vulnerability in this approach allows an attacker to send specially crafted requests resulting in arbitrary PHP execution. There...
Microsoft Browser Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a...
Amazon AWS XSS Protection Bypass
Exploit Author: Ajay Gowtham Vendor: ========================== http://aws.amazon.com/ Amazon Web Services, is a subsidiary of Amazon.com, which offers a suite of cloud computing services that make up an on-demand computing platform. These services operate from 12 geographical regions across the...
Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory
mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...
Post Exploitation Powershell Tool: mimikittenz
Post Exploitation Powershell Tool mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes usi...
The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by using WLS – Web Services...
The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data confidentiality by exploiting WLS – Web Services...
The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data by using WLS – Web Services...
The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data by using WLS – Web Services...
The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by using WLS – Web Services...
Vulnerability of WebLogic Server software, allowing a remote attacker to compromise protected information
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data integrity by exploiting WLS – Web Services...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using the JAX-WS subcomponent...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit application development tool relates to subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the JAX-WS subcomponent...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit application development tool relates to subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the JAX-WS subcomponent...