343 matches found
IBM FileNet Workplace XT Arbitrary File Upload Vulnerability
IBM FileNet is a suite of enterprise content management platforms from IBM in the U.S. IBM FileNet Workplace XT is one of the client Web applications that provides access to document management and business process management. An arbitrary file upload vulnerability exists in IBM FileNet Workplace...
CVE-2016-5981
Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...
CVE-2016-5981
CVE-2016-5981 affects IBM FileNet Workplace XT up to 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) up to 4.0.2.14-P8AE-IF001. The IBM Security Bulletin and related sources describe a cross-site scripting (XSS) vulnerability caused by misconfigured RegExpSecurityFilter and ScriptSe...
vHack XT - Hacking Simulator - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application vHack XT - Hacking Simulator published at the 'play' market has multiple vulnerabilities...
IBM FileNet Workplace XT and FileNet Workplace Cross-Site Scripting Vulnerabilities
IBM FileNet Workplace XT and FileNet Workplace are among the client Web applications that provide access to file management and business process management. A cross-site scripting vulnerability exists in IBM FileNet Workplace XT and FileNet Workplace, which could be exploited by remote attackers ...
Sierra Wireless AirLink Raven XE/XT Credential Sniffing Vulnerability
The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. A credential sniffing vulnerability exists in AirLink Raven XT and XE. An attacker can exploit the vulnerability to sniff credentials and log into the system...
Sierra Wireless AirLink Raven XE/XT Unauthorized Access Vulnerability
The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. An unauthorized access vulnerability exists in AirLink Raven XT and XE. An unauthenticated, remote attacker could exploit the vulnerability to access system...
UBUNTU-CVE-2016-3135
Integer overflow in the xtalloctableinfo function in net/netfilter/xtables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service heap memory corruption via an IPTSOSETREPLACE setsockopt call...
Coremail XT-3.0 /coremail/XT3/main/intervalCheck.jsp 跨站脚本漏洞
No description provided by source...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the qt-Xt-2.3.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
php wcms XT 0.0.7 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
Xt-News 0.1 show_news.php id_news Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...
Xt-News 0.1 add_comment.php id_news Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...
Xt-News 0.1 show_news.php id_news Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...
XT-Commerce 1.0 Beta 1 => Pass / Creat and Download Backup Vulnerability
No description provided by source...
Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Include (RFI) Vulnerability
No description provided by source. Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com...
Design/Logic Flaw
A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/initrunit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object...
Stack overflow
Stack-based buffer overflow in the subE110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service memory corruption by writing a long string to the /dev/socket/initrunit...
CVE-2013-5933
Stack-based buffer overflow in the subE110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service memory corruption by writing a long string to the /dev/socket/initrunit...
CVE-2013-4777
Summary of CVE-2013-4777 (Android 2.3.7, Motorola Defy XT, Republic Wireless) The advisory describes an exploit path where the device’s init process creates a /dev/socket/init_runit LocalSocket to accept shell commands. The underlying issue is a stack-based buffer overflow in the sub_E110 functio...