ERPSCAN Research Advisory [ERPSCAN-15-022] SAP NetWeaver 7.4 - XSS

2015-12-14 Thread ERPScan inc
Application:SAP NetWeaver Versions Affected: SAP NetWeaver J2EE Engine 7.40 Vendor URL: http://SAP.com Bugs: Cross-Site Scripting Send: 13.07.2015 Reported: 13.07.2015 Vendor response:

[SECURITY] [DSA 3417-1] bouncycastle security update

2015-12-14 Thread Luciano Bello
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 - - Debian Security Advisory DSA-3417-1 secur...@debian.org https://www.debian.org/security/Luciano Bello December 14, 2015

[ERPSCAN-15-021] SAP NetWeaver 7.4 - SQL Injection vulnerability

2015-12-14 Thread ERPScan inc
Application:SAP NetWeaver Versions Affected: SAP NetWeaver J2EE Engine 7.40 Vendor URL: http://SAP.com Bugs: SQL injection Send:13.07.2015 Reported: 13.07.2015 Vendor response: 14.07.2015 Date of