Marc Ruef

A problematic issue has been identified, affecting an unknown function of the file users.php. The manipulation of the `q` argument leads to cross-site scripting. This issue can be exploited remotely.

A problematic issue was discovered, leading to cleartext storage of passwords in the database. This occurs due to the manipulation of an unknown function.

A critical issue has been found that affects Siri. It is possible to initiate Siri on the same device by playing an audio or video file, which could allow for remote execution of commands. The existence and implications of this issue are disputed by Apple, despite public demonstrations of the attack.

A critical issue affects the Service Browser, which introduces hard-coded credentials. Local attack is required to exploit this issue. It is recommended to change the configuration settings to mitigate the risk.

A vulnerability has been found in the file `/uscgi-bin/users.cgi` of the Service Browser, leading to improper authentication and elevated access possibilities. The attack can be launched on the local host.

A critical issue was found in the affected software, related to the underlying Windows XP operating system. The lack of patches may increase the attack surface. To exploit this issue, access to the local network is required.

A vulnerability was found in the Update Handler component of ISS BlackICE PC Protection, allowing cleartext transmission of data. This issue is declared as problematic and only affects products that are no longer supported by the maintainer.

A problem was found in the Update Handler of ISS BlackICE PC Protection, which can be exploited through cross site scripting by manipulating an unknown input. This issue can be attacked remotely. The exploit has been disclosed to the public. It is noted that this issue only affects products that are no longer supported by the maintainer.

A race condition in the Auto Lock feature leads to a local authentication bypass. The issue has been publicly disclosed and may be exploited.

A problematic vulnerability has been found in the Stresstest Scheme Handler of WEKA INTEREST Security Scanner, leading to a denial of service. The attack must be approached locally. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer.

A problematic vulnerability has been found, affecting the Home Button Protection. Repeatedly pressing the button can cause a local denial of service.

A problematic vulnerability has been found in the Webspider component of WEKA INTEREST Security Scanner. The issue allows for denial of service through manipulation of an unknown input, requiring local access to exploit. The exploit has been disclosed to the public. This vulnerability only affects products that are no longer supported by the maintainer.

A problematic vulnerability was found in the Stresstest Configuration Handler of the WEKA INTEREST Security Scanner, leading to a local denial of service through manipulation. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer.

A critical vulnerability was found in the Cross Site Scripting Detection component of ISS BlackICE PC Protection. The issue allows for privilege escalation through manipulation of POST/PUT/DELETE/OPTIONS Request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A problematic issue was found in the NZB Date Parser component. The manipulation of the `date` argument with the input `1000000000000000` as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A problem was found in the HTTP Handler component of the software. This issue can be exploited by manipulating an unknown input, leading to denial of service. The attack can be launched on the local host. The exploit has been disclosed to the public and may be used. This issue affects products that are no longer supported by the maintainer.

A problematic issue has been found in the software, where the manipulation of the `Username` argument leads to cross-site scripting. The attack can be initiated remotely. It is noted that this issue only affects products that are no longer supported by the maintainer.

A critical issue was found in the Login component, specifically affecting the file /siteminderagent/pwcgi/smpwservicescgi.exe. The manipulation of the `target` argument leads to an open redirect. This issue may be exploited as the details have been publicly disclosed. It is noted that this issue only affects products that are no longer supported by the maintainer.

A problematic vulnerability was found in the LAN Viewer component of the WEKA INTEREST Security Scanner, which can be exploited to cause a denial of service. The vulnerability requires local attacking and can be triggered by manipulating an unknown input. The exploit has been disclosed to the public. It is noted that this vulnerability only affects products that are no longer supported by the maintainer.

A vulnerability has been found in the Portscan component, which can be exploited to cause a denial of service. The attack can be initiated remotely and the exploit has been disclosed to the public. This issue affects products that are no longer supported by the maintainer.