Oracle Fusion Middleware Web Services Manager Unspecified Remote Information Disclosure

The version of one or more Fusion Middleware products installed on the remote host indicates a susceptibility to an unspecified, remote information disclosure attack related to the Web Services Manager Security Component accessible via the HTTP protocol. C Tenable Network Security, Inc...

Xenon Web Services SQL Injection

Exploit Title: Xenon Web Services SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor: http://xe.co.za/ Date : 14.02.2012 Platform : Php Demo Site : www.kawasakisa.co.za/newsdetails.php?newsid=385 SQL Exploit :...

CVE-2012-1035

AdaCore Ada Web Services (AWS) before 2.10.2 is affected by a denial-of-service vulnerability where hash values for form parameters can be triggered to collide predictably, leading to CPU exhaustion under crafted input. The issue stems from how AWS computes hashes for form parameters and can be e...

PT-2012-3033

Name of the Vulnerable Software and Affected Versions AdaCore Ada Web Services AWS versions prior to 2.10.2 Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption due to hash collisions. Recommendations For...

CVE-2012-1035: Improper Input Validation

AdaCore Ada Web Services AWS before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : openjdk-6, openjdk-6b18 regression (USN-1263-2) (BEAST)

USN-1263-1 fixed vulnerabilities in OpenJDK 6. The upstream patch for the chosen plaintext attack on the block-wise AES encryption algorithm CVE-2011-3389 introduced a regression that caused TLS/SSL connections to fail when using certain algorithms. This update fixes the problem. We apologize for...

Oracle Web Services Manager Web Services Security远程权限提升漏洞

BUGTRAQ ID: 51463 CVE ID: CVE-2012-3568 Oracle Web Services Manager可提供Web服务的安全解决方案。 Oracle Web Services Manager在实现上存在远程权限提升漏洞，远程已验证攻击者可利用此漏洞可通过HTTP协议影响Web Services Security组件及11.1.1.3、11.1.1.4、11.1.1.5版本。 0 Oracle Web Services Manager 11.1.1.5 Oracle Web Services Manager 11.1.1.4 Oracle Web...

CVE-2011-3568

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security...

CVE-2011-3569

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security...

CVE-2011-3531

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security...

CVE-2011-3531

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security...

CVE-2011-3531

CVE-2011-3531 affects Oracle Fusion Middleware’s Oracle Web Services Manager in versions 11.1.1.3, 11.1.1.4, and 11.1.1.5. The vulnerability is described as unspecified with impact to availability via unknown vectors related to Web Services Security. The connected documents confirm the affected p...

CVE-2011-3568

CVE-2011-3568 affects Oracle Fusion Middleware’s Oracle Web Services Manager component (versions 11.1.1.3, 11.1.1.4, 11.1.1.5). The vulnerability is described as unspecified and involves remote authenticated users impacting confidentiality and integrity via unknown vectors related to Web Services...

CVE-2011-3569

Technical details about CVE-2011-3569 are not provided in the connected documents. The entries repeat an unspecified remote information disclosure against Oracle Fusion Middleware Web Services Manager; monitor Oracle advisories for patch information.

CVE-2011-3569

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security...

CVE-2011-3568

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security...

UniOFuzz 0.1.2-beta - Universal fuzzing tool Released

UniOFuzz 0.1.2-beta - Universal fuzzing tool Released UniOFuzz version 0.1.2-beta - the universal fuzzing tool for browsers, web services, files, programs and network services/ports released by nullsecurity team. Video Demonstration: pigtail23, Developer of UniOFuzz demonstrated the tool in above...