CVE-2017-16345

CVE-2017-16345 is a buffer overflow in the Insteon Hub 2245-222 with firmware 1012, triggered via PubNub/HTTP requests to the cc channel. In the s_sonos path, the value of the s_port key is copied with strcpy into a 6-byte buffer at 0xa00017f4, and the destination can be shifted by sn_speaker 0–3...

PT-2018-6274 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: The issue allows an attacker to send an authenticated HTTP request to trigger it. Specifically, it involves copying the value for the s port key to a buffer using strcpy. This buffer has a size of 6 bytes...

PT-2018-6276 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: An attacker could send an authenticated HTTP request to trigger this issue in Insteon Hub. The value for the s vol key is copied using strcpy to the buffer at 0xa0001700. This buffer is maximum 12 bytes...

PT-2018-6267 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: The issue allows an attacker to send an authenticated HTTP request to trigger a buffer overflow. This occurs because the value for the host key is copied using strcpy to a buffer at 0xa00016e0, which is 3...

CVE-2018-14432: Exposure of Sensitive Information to an Unauthorized Actor

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all...

PT-2018-2660 · Linksys · Linksys E2500 +2

Name of the Vulnerable Software and Affected Versions: Linksys E1200 version 2.0.09 Linksys E2500 version 3.0.04 Description: An operating system command injection exists in the Linksys E-Series line of routers. Specially crafted entries to network configuration information can cause execution of...

CVE-2018-7781: Missing Encryption of Sensitive Data

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation...

Security Bulletin: Vulnerabilities in curl affect IBM Security Network Protection

Summary The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security vulnerabilities have been discovered in libcurl used with IBM Security Network Protection. Vulnerability Details CVEID:...

CVE-2018-10166: Cross-Site Request Forgery (CSRF)

The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows does not have Anti-CSRF tokens in any forms. This would allow an attacker to submit authenticated requests when an authenticated user browses an attack-controlled domain. This is fix...

Cisco Prime Infrastructure Elevation of Privilege Vulnerability (CNVD-2018-02043)

Cisco Prime Infrastructure PI is a set of Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies for wireless management. solution. An elevation of privilege vulnerability exists in Role-Based Access Control RBAC in Cisco Prime Infrastructure, which stems...

Password Disclosure In Logs

Sentry is vulnerable to password disclosure. If there is an error on authenticated request, the user's username and password are printed to the logs. This is due to the version of Django is used...

CVE-2017-9810: Cross-Site Request Forgery (CSRF)

There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312. This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain...

Cross site request forgery (csrf)

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

CVE-2015-5913

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

CVE-2015-5913

The CVE-2015-5913 entry affects Heimdal Kerberos as used by Apple OS X before 10.11. The underlying issue allows remote attackers to perform replay attacks against the SMB server by sending packet data that corresponds to a Kerberos-authenticated request. Affected environment is OS X prior to 10....

CVE-2015-5913: Improper Access Control

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

Oracle XML DB SID Discovery

This module simply makes an authenticated request to retrieve the sid from the Oracle XML DB httpd server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle XML DB SID Discovery',...

CVE-2003-0231: Undefined Security Weakness

Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service crash or hang via a long request to a named pipe...