Directory traversal

badjs-sourcemap-server receives files sent by badjs-sourcemap. badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

mysqljs Information Disclosure Vulnerability

mysqljs is a malware that steals environment variables and sends them to an attacker. A security vulnerability exists in mysqljs. The vulnerability can be exploited by an attacker to steal environment variables and send them to an address under the attacker's control...

Design/Logic Flaw

On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the "credential" cookie, which might make it easier for attackers to obtain access at a later time e.g., "at least for a few minutes"...

GitLab Community Edition (CE) and Enterprise Edition License Bypass Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has features similar to Github, with access to a project's file contents, commit history, bug list, etc. GitLab Community Edition CE is the...

Rockstar Games: Smuggle SocialClub's Facebook OAuth Code via Referer Leakage

In this report, the researcher provided a POC in which they were able to combine two issues to create a condition that potentially could have allowed an attacker to obtain OAuth tokens. One of the issues involved allowing external content to load in our Screenshot Viewer tool; we resolved this...

CVE-2018-0266

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables over the web interface. An attacker could exploit this vulnerability by browsin...

Suspicious Multiple Browsers Fake Update

A misleading web page, disguising as an update message, is used to trick a user into installing malware, leading to loss of data, or allowing the attacker to run arbitrary code on the infected machine...

Symantec Norton App Lock Authentication Bypass Vulnerability

Symantec Norton App Lock is a suite of applications from Symantec USA that provide security features for mobile devices. An authentication bypass vulnerability exists in Symantec Norton App Lock. An attacker could exploit the vulnerability to gain access to the device...

CVE-2017-14008

GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

Microsoft Cryptography Next Generation Security Bypass Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Cryptography Next Generation CNG is one of the cryptographic platforms. cng.sys driver is one of the drivers. A security bypass vulnerability exists in the cng.sys driver in Microsoft C...

CVE-2018-1000104

A plaintext storage of a password vulnerability exists in Jenkins Coverity Plugin 1.10.0 and earlier in CIMInstance.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser e.g. malicious extension to retrieve the configured keystore and priva...

The vulnerability of the Master IP Camera01’s microprogramming software, which stems from the use of pre-installed credentials, allows a intruder to gain access to the device with root privileges.

The vulnerability of the Master IP Camera01 microprogramming system lies in the use of pre-set credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device with root privileges...

CVE-2017-14798

A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root...

Unsafe Deserialization

geode-core is vulnerable to the unsafe deserialization of Java Objects. TcpServer within the Geode locator has a network port which can be used for deserializing data. If an attacker gains access to the Geode locator, they can potentially execute code by deserializing Java Objects. In addition to...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-02: CVE-2018-4912)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Puppet Agent Environment Disclosure Vulnerability

Puppet is a set of Puppet Labs configuration management tools based on the client/server C/S architecture.Puppet Agent is one of the agents. A security vulnerability exists in Puppet Agent. An attacker can exploit the vulnerability to retrieve environment information...

Input validation

An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service within the software that may allow a remote attacker to arbitrarily read/access system resources and affect the availability of the syste...

CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

CVE-2017-5754

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache...

[20181004] - Core - ACL Violation in com_users for the admin verification

In case that an attacker gets access to the mail account of an user who can approve admin verifications in the registration process he can activate himself...