PT-2018-10253

Name of the Vulnerable Software and Affected Versions PHPRAP versions 1.0.4 through 1.0.8 Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It can be exploited via the /debug URI by sending a POST request with specific parameters, such as apiurl=file:////etc/passwd...

PT-2015-4549

Name of the Vulnerable Software and Affected Versions RhodeCode versions prior to 2.2.7 Kallithea version 0.1 Description The issue allows remote authenticated users to obtain sensitive information, including API keys, by utilizing the "get repo" API method. Recommendations For RhodeCode versions...

PT-2015-4143

Name of the Vulnerable Software and Affected Versions ownCloud Server versions 6.x through 6.0.5 ownCloud Server versions 7.x through 7.0.2 Description The issue in the documents application allows remote authenticated users to obtain all valid session IDs via an unspecified API method...

CVE-2014-9049: Exposure of Sensitive Information to an Unauthorized Actor

The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method...

ACLs not properly enforced in "documents" application - ownCloud

The "documents" application is a collaborative web-based online editor for ODT files. Using this application you can easily share and collaborate on office documents. This application uses strong and very long random "Session IDs" to limit access to specific resources. Knowledge of this ID allows...

Server: ACLs not properly enforced in "documents" application

The "documents" application is a collaborative web-based online editor for ODT files. Using this application you can easily share and collaborate on office documents. This application uses strong and very long random "Session IDs" to limit access to specific resources. Knowledge of this ID allows...

Xxe

libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service read block and hang via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the 1 virConnectCompareCPU or 2 virConnectBaselineCPU API method, relate...

X-Ray 2.0 - VirusTotal frontent version for Suspicious Files Auto Submit

Raymond announce X-Ray 2.0, a program which is frontend for VirusTotal multi scanner. X-Ray will provide users with automatic submission of files that you think are suspicious to 35 Agnitum, Antiy Labs, Avast, AVG, Avira, Bitdefender, QuickHeal, ClamAV, Comodo, Dr.Web, Emsisoft, ESET, F-Prot,...