CVE-2016-1441

CVE-2016-1441 affects Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) within Cisco Configuration Assistant (CCA). The vulnerability lets unauthenticated remote attackers bypass filesystem and administrative-endpoint restrictions by issuing GET API calls to CNAP’s API endpoints. Root caus...

PT-2016-4791

Name of the Vulnerable Software and Affected Versions Cisco Cloud Network Automation Provisioner CNAP version 1.00 in Cisco Configuration Assistant CCA Description The issue allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls...

CVE-2016-1441: Improper Input Validation

Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...

Cisco Configuration Assistant Cloud Network Automation Provisioner Information Disclosure Vulnerability

Cisco Configuration Assistant CCA is a suite of solutions from Cisco that simplifies the configuration, deployment, and management of Cisco intelligent business communications systems.Cisco Cloud Network Automation Provisioner CNAP is one of the cloud network Automation Provisioning Software. An...

Cisco Configuration Assistant Request Processing Unauthorized Access Vulnerability

A vulnerability in Cisco Configuration Assistant CCA could allow an unauthenticated, remote attacker to access sensitive file systems and administrative endpoints without user authentication. The vulnerability is due to lack of controller mechanisms and input validation checks. An attacker could...

Mac OS X Code Execution

The vulnerability of the Captive Network Assistant component for the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Norwegian Travel Assistant - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Norwegian Travel Assistant published at the 'play' market has multiple vulnerabilities...

Apple OS X El Capitan Captive Network Assistant Arbitrary Code Execution Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in Apple OS X El Captive Network Assistant allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Google Allo a Clash of Privacy and Functionality

Reaction to the release of Google’s Allo messaging app has been mixed since it was unveiled Wednesday during Google’s I/O event. Allo has two modes, a normal mode run by an artificial intelligence that includes Google Assistant. It analyzes messages and offers suggestions based on the content tha...

CVE-2016-1800

Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-1800

Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...

Code injection

Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-1800

Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-1800: Improper Input Validation

Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...

PT-2016-2065

Name of the Vulnerable Software and Affected Versions Captive Network Assistant in Apple OS X versions prior to 10.11.5 Description The issue exists due to insufficient input validation in the Captive Network Assistant component of Mac OS X. This allows a remote attacker to execute arbitrary code...

Mac OS X 10.9.5 / 10.10.5 Multiple Vulnerabilities (Security Update 2016-003)

The remote host is running a version of Mac OS X that is 10.9.5 or 10.10.5 and is missing Security Update 2016-003. It is, therefore, affected by multiple vulnerabilities in the following components : - AMD - Captive Network Assistant - libxml2 - libxslt - OpenGL Note that successful exploitation...

[SECURITY] Fedora 22 Update: openvas-gsa-6.0.10-3.fc22

The Greenbone Security Assistant GSA is a lean web service offering a user web interface for the Open Vulnerability Assessment System OpenVAS. The GSA uses XSL transformation style-sheets that converts OMP responses from the OpenVAS infrastructure into presentable HTML...

[SECURITY] Fedora 23 Update: openvas-gsa-6.0.10-3.fc23

The Greenbone Security Assistant GSA is a lean web service offering a user web interface for the Open Vulnerability Assessment System OpenVAS. The GSA uses XSL transformation style-sheets that converts OMP responses from the OpenVAS infrastructure into presentable HTML...

HP Support Assistant Detection (Windows SMB Login)

Detects the installed version of HP Support Assistant Version Detection Windows. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HP Support Assistant Authentication Bypass Vulnerability - Windows

HP Support Assistant is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...