CVE-2016-9729

IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Reference : 1999545...

UBUNTU-CVE-2017-5404

A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

Arbitrary File Upload Vulnerability in eWebEditor Editor of Fuzhou Extreme Software Development Co.

Fuzhou Extreme Software Development Co. eWebEditor editor is a browser-based online HTML editor. An arbitrary file upload vulnerability exists in the eWebEditor editor of Fuzhou Extreme Software Development Co. Due to logging into the backend via anonymous access or weak account/password...

Geutebruck testaction.cgi Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Geutebruck testaction.cgi Remote Command Execution', 'Description' = %q This module exploits a an arbitrary command execution...

Anonymous Hacker took down over 10,000 Dark Web Sites; Leaked User Database

Dark Web is right now going through a very rough time. Just two days ago, a hacker group affiliated with Anonymous broke into the servers of Freedom Hosting II and took down more than 10,000 Tor-based .onion dark websites with an alarming announcement to its visitors, which said: "Hello, Freedom...

Linux Kodachi3 - Secure Open Source Linux Distribution

Linux Kodachi operating system is based on Debian 8.6 it will provide you with a secure, anti forensic, and anonymous operating system considering all features that a person who is concerned about privacy would need to have in order to be secure. Kodachi is very easy to use all you have to do is...

CVE-2016-6105

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas...

CVE-2016-6105

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas...

[SECURITY] Fedora 25 Update: onionshare-0.9.1-1.fc25

OnionShare lets you securely and anonymously share files of any size. It wo rks by starting a web server, making it accessible as a Tor hidden service, and generating an unguessable URL to access and download files. It doesn't requ ire setting up a server on the internet somewhere or using a thir...

Updated tor package fixes security vulnerability

It was discovered that Tor, a connection-based low-latency anonymous communication system, may read one byte past a buffer when parsing hidden service descriptors. This issue may enable a hostile hidden service to crash Tor clients depending on hardening options and malloc implementation...

Information Disclosure

products.poi is vulnerable to information disclosure. In workflows, the issues tracker inside private folder is visible to anonymous users...

User Cannot Connect To Anonymous Store Without Username And Password.

Issue: User cannot connect to anonymous storewithout username and password. Steps To Reproduce The Issue on Receiver 4.4 Create a Store for Unauthenticated users in StoreFront 3.0. Confirm that Advertised is set toNo for this store Install Receiver 4.4. Add the Store URL for the Unauthenticated...

Debian Security Advisory DSA 3741-1 (tor - security update)

It was discovered that Tor, a connection-based low-latency anonymous communication system, may read one byte past a buffer when parsing hidden service descriptors. This issue may enable a hostile hidden service to crash Tor clients depending on hardening options and malloc implementation. OpenVAS...

FTP Password Recovery - Command-line Lost or Forgotten FTP Password Finder Tool for Windows

FTP Password Recovery is a free command-line tool to find your lost or forgotten FTP password for any FTP server. It automatically detects if the target FTP server allows any Anonymous without password connections. In case your FTP server is running on different port other than port 21 then you c...

Anonymous Hacktivist 'Barrett Brown' Released From Prison

Barrett Brown, a journalist, formerly served as an unofficial spokesman for the hacktivist collective Anonymous, finally walked free from prison on Tuesday morning after serving more than four years behind bars. The Dallas-born investigative journalist was arrested in 2012 from his home while he...

XenMobile user shows as "Anonymous" in XenMobile Admin Console

Within the XenMobile console, under the user column, few users started showning as anonymous. In zdm.logs we might see:User '[email protected]' not found or is disabled. Switching to anonymous mode...

Hacker who exposed Steubenville Rape Faces longer Prison term than Rapists

Remember Steubenville High School Rape Case? In 2012, Steubenville Ohio high school's football team players gang-raped an unconscious teenage girl from West Virginia and took photographs of the sexual assault. In December 2012, a member of the hacker collective Anonymous hacked into the...

389-ds-base: ACI readable by anonymous user

It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information...

USN-3127-1 linux vulnerabilities

It was discovered that the compression handling code in the Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel did not properly check for an integer overflow. A local attacker could use this to cause a denial of service system crash. CVE-2014-9904 Kirill A. Shutemov discovered...

SMB User Authentication Bypass - ownCloud

ownCloud includes an optional and not by default enabled SMB authentication component that allows to authenticate users against an SMB server. This backend is implemented in a way that it tries to connect to a SMB server and if that succeeded consider the user logged-in. The backend did not...