CVE-2019-7478

SonicWall Global Management System (GMS) Webservice module is affected by CVE-2019-7478: unauthenticated SQL injection in GMS Webservice, affecting GMS versions 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1. Root cause is lack of input validation/execution of externally entered SQL statements in the Webservice...

CVE-2019-7478

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...

SonicWall Global Management System Webservice Module SQL Injection Vulnerability

The SonicWall Global Management System GMS is a global management system from SonicWall USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A SQL injection vulnerability exists in the...

PT-2019-18621

Name of the Vulnerable Software and Affected Versions GMS versions 8.4 through 9.1 Description A vulnerability in GMS allows an unauthenticated user to perform SQL injection in the Webservice module. Recommendations For GMS versions 8.4 through 9.1, update to a version that contains a fix for thi...

CVE-2019-7478: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...

Equifax-vdp: Information Leak (Github)

In Github I found some credentials to use in a webservice that exposes very sensitive information of people, family group, financial situation, and more. Github: https://github.com/geraldincg/proyecto/blob/9c89787deb1d217f58b58786d90bfb3eab290237/Proyecto/ViewModels/WebService/ConexionWS.cs The...

Starbucks: Subdomain takeover of datacafe-cert.starbucks.com

Summary: The subdomain datacafe-cert.starbucks.com had an CNAME record pointing to an unclaimed Azure webservice. This is a high severity security issue because an attacker can register the subdomain on Azure and therefore can own the subdomain datacafe-cert.starbucks.com. Description: The dangli...

Apache axis remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, convinced that the server found the Apache axis component remote command execution exploit way. The vulnerability is essentially due to the administrator for the AdminService configuration error, when enableRemoteAdmin property is set to true, the attacker can remotely use of the...

Starbucks: Blind SQLi leading to RCE, from Unauthenticated access to a test API Webservice

@geekjeremy, at the same time as other hackers who submitted their own reports, discovered a browsable WSDL service on an API endpoint under the starbucks.com.cn domain, running on a non-standard port. @geekjeremy demonstrated that the service had several functions that executed without any...

LibreOffice WEBSERVICE Information Disclosure (CVE-2018-6871)

An information disclosure vulnerability exists in LibreOffice. The vulnerability is due to improper validation of the WEBSERVICE function argument. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted office document...

Arbitrary File Read

libreoffice is vulnerable to arbitrary file read attacks. The vulnerability exists as LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function...

Mongo Web Admin 6.0 - Information Disclosure

Mongo Web Admin 6.0 - Information Disclosure Exploit Title: Mongo Web Admin 6.0 - Information Disclosure Dork: N/A Date: 2018-11-04 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mongoadmin.org/ Software Link:...

CVE-2018-12640

CVE-2018-12640 affects Insteon HD IP Camera White 2864-222. The webService binary is vulnerable to a buffer overflow triggered by crafted pid, pwd, or usr keys in a GET request on port 34100. The vulnerability is documented in multiple sources (NVD entry and CNVD/CNVD-related advisories). A relat...

CVE-2018-12640

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100...

CVE-2018-11560: Out-of-bounds Write

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...

PT-2018-11302

Name of the Vulnerable Software and Affected Versions Insteon HD IP Camera White 2864-222 affected versions not specified Description The issue concerns a Buffer Overflow in the webService binary of the affected device. This occurs via a crafted pid, pwd, or usr key in a GET request on port 34100...

CVE-2018-12640: Improper Restriction of Operations within the Bounds of a Memory Buffer

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100...

CentOS Update for autocorr-af CESA-2018:0517 centos6

Check the version of autocorr-af SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882854";...

Scientific Linux Security Update : libreoffice on SL6.x i386/x86_64 (20180313)

Security Fixes : - libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula CVE-2018-6871 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108365; scriptversion"1.5";...

Ubuntu 17.10 : libreoffice regression (USN-3579-3)

USN-3579-1 fixed a vulnerability in LibreOffice. After upgrading, it was no longer possible for LibreOffice to open documents from certain locations outside of the user's home directory. This update fixes the problem. We apologize for the inconvenience. Original advisory details : It was discover...