CVE-2018-16954

Summary: CVE-2018-16954 affects Oracle WebCenter Interaction Portal 10.3.3. The login function does not validate the in_hi_redirect parameter, enabling an open redirect after successful login. This is due to insecure redirection in the login flow. The vulnerability’s exploitation details, affecte...

CVE-2018-16952

The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal such as changing a portal user's password. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle...

CVE-2018-16952

The CVE describes a CSRF design flaw in Oracle WebCenter Interaction Portal 10.3.3, where protection against CSRF is not implemented. This allows potential unauthorized actions in the portal, such as changing a user’s password. The issue is documented across multiple feeds (NVD, CVE listing, CNVD...

Oracle WebCenter Interaction Cross-Site Scripting Vulnerability (CNVD-2018-19487)

Oracle WebCenter Interaction is Oracle's suite for creating enterprise portals, collaborative communities, portfolio applications, and social applications.Oracle WebCenter Interaction Portal is one of the management interfaces. A cross-site scripting vulnerability exists in the...

Oracle WebCenter Interaction Cross-Site Scripting Vulnerability

Oracle WebCenter Interaction is Oracle's suite for creating enterprise portals, collaborative communities, portfolio applications, and social applications.Oracle WebCenter Interaction Portal is one of the management interfaces. A cross-site scripting vulnerability exists in the login feature in...

Oracle WebCenter Interaction Open Redirect Vulnerability

Oracle WebCenter Interaction is Oracle's suite for creating enterprise portals, collaborative communities, portfolio applications, and social applications.Oracle WebCenter Interaction Portal is one of the management interfaces. An open redirect vulnerability exists in the login functionality in...

Apple iOS and tvOS Wi-Fi Denial of Service Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. wi-fi is one of the wireless Internet components. A security vulnerability exists in the Wi-Fi component of Apple iOS prior to version 10.3....

Gitlab project import component remote code execution vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has similar features to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition CE is...

CVE-2018-3710

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution...

Remote code execution

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution...

CVE-2018-3710

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution...

PT-2018-16134 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab Community and Enterprise Editions version 10.3.3 Description: The issue is related to an insecure temporary file in the project import component, which can result in remote code execution. Recommendations: For Gitlab Community and...

Apple iOS v11 6S & 7 - (Health App) DoS Vulnerability

Document Title: =============== Apple iOS v11 6S & 7 - Health App DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2103 Video: https://www.youtube.com/watch?v=AC8Jc8s7uCU ID: 677013407 Release Date: ============= 2018-01-04 Vulnerability Laboratory ID...

Apple iOS v11 6S & 7 - (Health App) DoS Vulnerability

Document Title: =============== Apple iOS v11 6S & 7 - Health App DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2103 Video: https://www.youtube.com/watch?v=AC8Jc8s7uCU ID: 677013407 Release Date: ============= 2018-01-04 Vulnerability Laboratory ID...

WhatsApp 2.17.52 - Memory Corruption Exploit

Exploit for iOS platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on:...

WhatsApp 2.17.52 Memory Corruption

!/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on: iPhone 5/6s iOS 10.3.3 and 11 Description:...

Remote Wi-Fi Attack Backdoors iPhone 7

Google on Tuesday disclosed details and a proof-of-concept exploit for a Wi-Fi firmware vulnerability in Broadcom chipsets patched this week in iOS 11. The attack enables code execution and persistent presence on a compromised device. “The exploit gains code execution on the Wi-Fi firmware on the...

CVE-2017-7065

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "Wi-Fi" component. It allows remote attackers to execute arbitrary code on the Wi-Fi chip or cause a denial of service memory...

Security Lacking in Previous AppleAVEDriver iOS Kernel Extension

An obscure Apple kernel extension patched in July in iOS 10.3.3 was originally built without security measures in place, according to the researcher who privately disclosed the flaws. Today at the Hack in the Box security conference in Singapore, Zimperium zLabs’ Adam Donenfeld was scheduled to...

Apple iOS EventKitUI Resource Exhaustion Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. The EventKitUI component is a component used to integrate applications with the built-in calendar program. A resource exhaustion vulnerability exists in the EventKitUI component in Apple iOS versions prior to 10.3.3. A...