IBM WebSphere Application Server for z/OS JAX-RPC远程安全漏洞

BUGTRAQ ID: 52250 CVE ID: CVE-2012-0199 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 IBM WebSphere Application Server for...

IBM WebSphere Application Server Multiple Vulnerabilities

The version of IBM WebSphere application server running on the remote host is potentially affected by multiple vulnerabilities : - An insecure file permission vulnerability that only affects WebSphere Application Server running on the IBM i platform. A local attacker may be able to exploit this...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7918)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. This update fixes the following security issues : - X.25 remote DoS. CVE-2010-3873. bnc651219 - X.25 remote Dos. CVE-2010-4164. bnc653260 - 1 socket local DoS. CVE-2010-4249. bnc655696 -...

IBM WebSphere Application Server z/OS跨站脚本和未明漏洞

IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS存在安全漏洞，允许攻击者进行跨站脚本和其他攻击。 1以JAX-RPC SW-Security装载类时存在WSEC5007E错误。 2传递给WEB消息组件的未明输入在返回用户之前缺少过滤，可导致跨站脚本攻击，可获得敏感信息或劫持用户会话。 0 IBM WebSphere Application Server for z/OS...

DZCP (deV!L_z Clanportal) 1.5.5 Moviebase Addon - Blind SQL Injection

DZCP deV!Lz Clanportal 1.5.5 Moviebase Addon - Blind SQL Injection ======================================================================================== | Title : deV!Lz Clanportal 1.5.5 Moviebase Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Download :...

DZCP (deV!L_z Clanportal) Gamebase Addon - SQL Injection

======================================================================================== | Title : deV!Lz Clanportal Gamebase Addon SQL Injection Vulnerability | Author Easy Laster | Download : http://www.modsbar.de/Addons/464/gamebase-addon/ | Script : deV!Lz Clanportal Gamebase Addon | Price :...

DZCP (deV!L_z Clanportal) Gamebase Addon - SQL Injection

DZCP deV!Lz Clanportal Gamebase Addon - SQL Injection ======================================================================================== | Title : deV!Lz Clanportal Gamebase Addon SQL Injection Vulnerability | Author Easy Laster | Download : http://www.modsbar.de/Addons/464/gamebase-addon/ ...

DZCP (deV!L_z Clanportal) 1.5.5 Moviebase Addon - Blind SQL Injection

======================================================================================== | Title : deV!Lz Clanportal 1.5.5 Moviebase Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Download : http://www.modsbar.de/Addons/79/moviebase/ | Script : deV!Lz Clanportal 1.5.5 Moviebase ...

deV!L`z Clanportal 1.5.5 Moviebase SQL Injection

======================================================================================== | Title : deV!Lz Clanportal 1.5.5 Moviebase Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Download : http://www.modsbar.de/Addons/79/moviebase/ | Script : deV!Lz Clanportal 1.5.5 Moviebase ...

z-blog 1.8 wap pages cell phone search at the SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

具体 页面 请 查看 http://bbs.rainbowsoft.org/thread-65778-1-1.html 2 0 1 2 年 1 月 9 日 to update the record Important update 1, repair cell phone search atSQL injectionvulnerabilities, to give us the security risks are very sorry. Please update the compressed package of the FUNCTION/csystemwap. asp file...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.209.el62.1 - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSCATR-messa.patch bz751312 - CVE: CVE-2011-4111 - Resolves: bz751312 CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSCATR message rhel-6.2.z...

Directory traversal

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

WordPress Plugin A to Z Category Listing 1.3 - SQL Injection

WordPress Plugin A to Z Category Listing 1.3 - SQL Injection Exploit Title: WordPress A to Z Category Listing plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $initletter = $GET'R'; $sql = "select from ".$tableprefix."terms...

WordPress A To Z Category Listing 1.3 SQL Injection

Exploit Title: WordPress A to Z Category Listing plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $initletter = $GET'R'; $sql = "select from ".$tableprefix."terms wpt,".$tableprefix."termtaxonomy wptt where wpt.name like...

WordPress A to Z Category Listing plugin <= 1.3 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress A to Z Category Listing plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $initletter = $GET'R'; $sql = "select from ".$tableprefix."terms...

CentOS Update for kernel CESA-2010:0398 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2010:0398 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

HP Data Protector (HP-UX) - Remote Shell

HP Data Protector HP-UX - Remote Shell !/bin/bash Exploit Title: HP Data Protector Remote Shell for HPUX Date: 2011-08-02 Author: Adrian Puente Z. Software Link:http://www8.hp.com/us/en/software/software- product.html?compURI=tcm:245-936920&pageTitle=data-protector Version: 0.9 Tested on: HPUX CV...

IBM WebSphere Application Server 7.0 < Fix Pack 17 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 17 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Use of an insecure XML encryption algorithm could allow for decryption of JAX-RPC or JAX-WS Web Services requests. PM34841 - A...

java-1.6.0-openjdk security update

1:1.6.0.0-1.22.1.9.8.0.1.el56 - Add oracle-enterprise.patch 1:1.6.0.0-1.22.1.9.8 - Resolves: rhbz668488 - Bumped to IcedTea6 1.9.8 - RH706250, S6213702, CVE-2011-0872: so non-blocking sockets with TCP urgent disabled get still selected for read ops win - RH706106, S6618658, CVE-2011-0865:...