CVE-2011-3568: Undefined Security Weakness

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security...

IBM WebSphere Application Server z/OS跨站脚本和未明漏洞

IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS存在安全漏洞，允许攻击者进行跨站脚本和其他攻击。 1以JAX-RPC SW-Security装载类时存在WSEC5007E错误。 2传递给WEB消息组件的未明输入在返回用户之前缺少过滤，可导致跨站脚本攻击，可获得敏感信息或劫持用户会话。 0 IBM WebSphere Application Server for z/OS...

PT-2012-1714

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.3 through 11.1.1.5 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to Web Services Security. Recommendations For version...

CVE-2011-3531: Undefined Security Weakness

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security...

PT-2012-1720

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.3 through 11.1.1.5 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Web Services Security. Recommendations Fo...

PT-2012-1721

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.3 through 11.1.1.5 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Web Services Security. Recommendations For versions 11.1.1.3...

CVE-2011-3569: Undefined Security Weakness

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security...

CVE-2011-1377

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

Code injection

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

CVE-2011-1377

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

CVE-2011-1377

CVE-2011-1377 affects IBM WebSphere Application Server with WS-Security enabled. IBM and NVD sources describe a weakness where a WS‑Security/LTPA token handling flaw can allow a user to gain elevated privileges, potentially via identity reuse between inbound/outbound tokens. Affected versions inc...

CVE-2011-1377: Undefined Security Weakness

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

PT-2012-1513

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS 6.1 versions prior to 6.1.0.41 Description The Web Services Security component in the Web Services Feature Pack for IBM WebSphere Application Server does not properly handle the enabling of WS-Security for ...

Ox Design Web Services SQL Injection

Exploit Title: Ox Design Web Services SQL Injection Vulnerability Google Dork: intext:"Powered by Ox Design Web Services" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.oxdesign.gr Version: All Version Category:: webapps Securit...

Oracle WebLogic Server Web Services Security Policy not Enforced (CVE-2008-5459)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified vulnerability that could allow a remote, unauthenticated attacker to disable enforcement of security policies for the web services. Such an attack could have a...

[SECURITY] Fedora 15 Update: libsocialweb-0.25.20-1.fc15

libsocialweb is a social data server which fetches data from the "social we b", such as your friend's blog posts and photos, upcoming events, recently play ed tracks, and pending eBay auctions. It also provides a service to update your status on web services which support it, such as MySpace and...

[SECURITY] Fedora 15 Update: rest-0.7.12-1.fc15

This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of servic es don't actually adhere to this strict definition. Instead, their RESTful e...

[SECURITY] Fedora 16 Update: rest-0.7.12-1.fc16

This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of servic es don't actually adhere to this strict definition. Instead, their RESTful e...

[SECURITY] Fedora 16 Update: libsocialweb-0.25.20-1.fc16

libsocialweb is a social data server which fetches data from the "social we b", such as your friend's blog posts and photos, upcoming events, recently play ed tracks, and pending eBay auctions. It also provides a service to update your status on web services which support it, such as MySpace and...

Tor Project Sets Up Cloud Bridge Project on Amazon EC2

The Tor Project has started a new system designed to help people start and run Tor bridges in the cloud using Amazon’s EC2 platform. The Tor Cloud runs on Amazon’s new micro-instance tier that lets people run instances for free for the first year. Tor is used by people around the world to help...