exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Marc Nimmerrichter

SAP E-Recruiting Email Verification Bypass

Posted Sep 13, 2017

Authored by Marc Nimmerrichter | Site sec-consult.com

SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability.

tags | exploit, bypass

SHA-256 | f7872424a2554686226a1a479c765245cbc5fb05e0518567d3bfd78a6384b4bc

Download | Favorite | View

OSCI-Transport Library 1.2 Padding Oracle / Signature Wrapping / XXE Injection

Posted Jun 30, 2017

Authored by Wolfgang Ettlinger, Marc Nimmerrichter | Site sec-consult.com

OSCI-Transport library version 1.2 for German e-Government suffers from padding oracle, signature wrapping, and XML external entity injection vulnerabilities.

tags | advisory, vulnerability, xxe

advisories | CVE-2017-10668, CVE-2017-10669, CVE-2017-10670

SHA-256 | e836d90008122100e3bb9c8d79986aeef8cdb8cc46a5f5f505ce7a6396d60f8e

Download | Favorite | View