82 matches found
CVE-2022-3337
It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/lock-warp-switch feature being enabled on Zero Trust Platform. This led to...
CVE-2022-3337 Lock WARP switch bypass by removing VPN profile on iOS mobile client
It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/lock-warp-switch feature being enabled on Zero Trust Platform. This led to...
CVE-2022-3337
Cloudflare WARP on iOS is affected by CVE-2022-3337: a user can delete the VPN profile despite the Lock WARP switch being enabled, bypassing policies enforced by the Zero Trust platform on enrolled devices. Affected product is the Cloudflare WARP mobile client for iOS; the vulnerability relates t...
CVE-2022-3337 Lock WARP switch bypass by removing VPN profile on iOS mobile client
It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/lock-warp-switch feature being enabled on Zero Trust Platform. This led to...
MyBB Hide Thread Content 1.0 Information Disclosure
Exploit Title: MyBB Hide Thread Content Plugin 1.0 - Information Disclosure Date: 1/27/2021 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1430 Version: 1.0 Tested on: Windows 10 CVE: CVE-2021-3337 1. Description: This plugin...
CVE-2021-3337
creationtimestamp| type| source ---|---|--- 2021-01-28 22:39:19+00:00| seen| https://t.me/cibsecurity/22813...
CVE-2021-3337
The CVE-2021-3337 issue affects the MyBB plugin “Hide-Thread-Content” (through 2021-01-27). The vulnerability allows remote attackers to bypass content-reading restrictions by clicking the reply or quote option in the postbit, leading to information disclosure. Affected component is the Hide-Thre...
CVE-2012-3337
creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:35+00:00| seen| https://t.me/cibsecurity/14417...
CVE-2012-3337
CVE-2012-3337 affects IBM InfoSphere Guardium 8.0, 8.01, and 8.2. A directory traversal flaw lets remote attackers send specially crafted URLs (../ sequences) to download arbitrary files. IBM’s advisory labels it a remote file disclosure vulnerability in Guardium. Remediation per the vendor invol...
CVE-2020-3337
Cisco Umbrella web server vulnerability (CVE-2020-3337) stems from improper input validation of URL parameters in an HTTP request, enabling an unauthenticated, remote attacker to redirect users to a malicious URL. Connected sources confirm affected product: Cisco Umbrella web server; vulnerabilit...
Ubuntu 14.04 LTS / 16.04 LTS : Valgrind vulnerabilities (USN-3337-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3337-1 advisory. It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a...
CVE-2017-3337
CVE-2017-3337 affects Oracle E-Business Suite’s Oracle Marketing UI subcomponent. A vulnerability exists in the Marketing module that could allow an unauthenticated, network-accessible attacker (via HTTP) to compromise Marketing, potentially leading to unauthorized read, and in some cases update/...
Oracle E-Business Multiple Vulnerabilities (April 2017 CPU)
The version of Oracle E-Business installed on the remote host is missing the April 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Oracle Marketing component within the User Interface subcomponent that allows...
[SECURITY] [DSA 3337-1] gdk-pixbuf security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3337-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 18, 2015 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-3337-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ElasticSearch exposure local arbitrary file read vulnerability, impact 1. 4. 5 and 1. 5. Before 2 all versions-bug warning-the black bar safety net
! Recently in exploit-db on the aerator out of the ElasticSearch plug-in functionality directory traversal Path Transversal cause local arbitrary file read vulnerability, impact 1. 4. 5 and 1. 5. Before 2 All version. In zoomeye on casually looking for a few tried, found vulnerabilities in the ar...
ElasticSearch 1.4.5 / 1.5.2 - Path Transversal Vulnerability
Exploit for php platform in category web applications !/usr/bin/python Crappy PoC for CVE-2015-3337 - Reported by John Heasman of DocuSign Affects all ElasticSearch versions prior to 1.5.2 and 1.4.5 Pedro Andujar || twitter: pandujar || email: @segfault.es || @digitalsec.net Tested on default Lin...
ElasticSearch 1.4.5 1.5.2 - Directory Traversal
ElasticSearch 1.4.5 1.5.2 - Directory Traversal !/usr/bin/python Crappy PoC for CVE-2015-3337 - Reported by John Heasman of DocuSign Affects all ElasticSearch versions prior to 1.5.2 and 1.4.5 Pedro Andujar || twitter: pandujar || email: @segfault.es || @digitalsec.net Tested on default Linux .de...
ElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal
!/usr/bin/python Crappy PoC for CVE-2015-3337 - Reported by John Heasman of DocuSign Affects all ElasticSearch versions prior to 1.5.2 and 1.4.5 Pedro Andujar || twitter: pandujar || email: @segfault.es || @digitalsec.net Tested on default Linux .deb install /usr/share/elasticsearch/plugins/...