Code injection

A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0...

CVE-2016-6444

CVE-2016-6444 affects Cisco Meeting Server. The OpenVAS and CVE records describe an unauthenticated, remote CSRF vulnerability in the Web Bridge interface caused by insufficient CSRF protections. An attacker could lure a user to a malicious link to submit arbitrary requests to the device with the...

CVE-2016-6446

Cisco Meeting Server Web Bridge vulnerability (CVE-2016-6446) allows an unauthenticated remote attacker to disclose memory from a connected server. The issue stems from missing bounds checks in the Web Bridge functionality; a crafted packet can per-packet disclose memory, potentially exposing pri...

Cisco Meeting Server Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a Web Bridge user. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing the user of...

Cisco Meeting Server Information Disclosure Vulnerability

A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. The vulnerability is due to missing bounds checks in the Web Bridge functionality. An attacker could exploit this vulnerability by sending a crafted...

How to Capture a Network Trace from a XenServer Physical Interface, Virtual Bridge, and VM Virtual Interface

This article describes how to capture a network trace from a XenServer physical interface, Virtual Bridge, and Virtual Machine Virtual Interface...

CVE-2016-3876

providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the SAFEBOOTDISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge adb tool, aka internal bug 29900345...

UBUNTU-CVE-2016-3876

providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the SAFEBOOTDISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge adb tool, aka internal bug 29900345...

hebdenbridgetimes.co.uk XSS vulnerability

Vulnerable URL: http://www.hebdenbridgetimes.co.uk/search?query=rihanna+is+pretty+good=%22prompt%22OPENBUGBOUNTY%22%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3779752 VIP...

Tor Update Fixes ReachableAddresses Problem

The Tor Project on Wednesday updated its software package to version 0.2.8.7 and fixed a number of issues, including a bug it calls “important” in the ReachableAddresses option. ReachableAddresses is a list of IP addresses and ports that are permitted by a firewall; admins can set IP ranges and...

Atutor 2.2.1 Path Traversal

Advisory ID: HTB23297 Product: Atutor Vendor: Atutor Vulnerable Versions: 2.2.1 and probably prior Tested Version: 2.2.1 Advisory Publication: February 24, 2016 without technical details Vendor Notification: February 24, 2016 Vendor Patch: July 1, 2016 Public Disclosure: August 2, 2016...

[SECURITY] Fedora 23 Update: kf5-kross-5.24.0-1.fc23

Kross is a scripting bridge to embed scripting functionality into an application. It supports QtScript as a scripting interpreter backend...

Core Tor Contributor Leaves Project; Shutting Down Important Tor Nodes

Another blow to the Tor Project: One of the Tor Project's earliest contributors has decided to quit the project and shut down all of the important Tor nodes under his administration. Lucky Green was part of the Tor Project before the anonymity network was known as TOR. He probably ran one of the...

The vulnerability of the Adobe Bridge file manager, allowing a hacker to execute arbitrary code

The vulnerability of the Adobe Bridge file manager arises from buffer overflow in dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code...

The vulnerability of the Adobe Bridge file manager, allowing a hacker to execute arbitrary code

The vulnerability of the Adobe Bridge file manager is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability allows a local attacker to execute arbitrary code...

The vulnerability of the Adobe Bridge file manager, which allows a hacker to execute arbitrary code or cause a service failure

The vulnerability of the Adobe Bridge file manager arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a service failure memory corruption...

Paragon Initiative Enterprises: Stored Cross-Site-Scripting in CMS Airship's authors profiles

I'm just checking out CMS Airship and some of the security features look pretty nice. Awesome job on that! After clicking around a bit I stumbled however upon a stored XSS vulnerability in the Bridge. As per /bridge/help I use 1.1.0 version installed via Docker, as I couldn't find any reference...

WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting

WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting Vendor Homepage: http://bridge.qodeinteractive.com/ Software Link: http://themeforest.net/item/bridge-creative-multipurpose-wordpress-theme/7315054 Version: 9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Stored XSS,...

WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting

Vendor Homepage: http://bridge.qodeinteractive.com/ Software Link: http://themeforest.net/item/bridge-creative-multipurpose-wordpress-theme/7315054 Version: 9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Stored XSS, Ability to overwrite any theme settings. Time line: Found 23-Apr-2016, Vendor...

Deploying CloudBridge Virtual WAN in Virtual Inline Mode with Additional Internet Link

This article addresses the deployment of a Cloud Bridge Appliance in Virtual Inline Mode with additional internet link enabled with Internet Services. This deployment serves the requirement where we do not need the traffic intended for internet access to traverse the virtual path between the site...