7495 matches found
USN-4134-3 ibus vulnerability
USN-4134-1 fixed a vulnerability in IBus. The update caused a regression in some Qt applications and the fix was subsequently reverted in USN-4134-2. The regression has since been resolved and so this update fixes the original vulnerability. We apologize for the inconvenience. Original advisory...
CVE-2020-6972: Authentication Bypass by Capture-replay
In Notifier Web Server NWS Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser...
PT-2020-19320
Name of the Vulnerable Software and Affected Versions Notifier Web Server NWS versions 3.50 and earlier Description The issue allows the Honeywell Fire Web Server’s authentication to be bypassed by a capture-replay attack from a web browser. Recommendations For Notifier Web Server NWS versions 3....
Unspecified Vulnerability in Aquaforest TIFF Server
Aquaforest TIFF Server is a TIFF Tagged Image File Format server from Aquaforest UK. A security vulnerability exists in Aquaforest TIFF Server version 4.0. An attacker can exploit the vulnerability to capture SMB hashes...
CVE-2020-9324
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
CVE-2020-9324
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
CVE-2020-9324
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
Design/Logic Flaw
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
CVE-2020-9324
CVE-2020-9324 affects Aquaforest TIFF Server 4.0 and is described in connected sources as allowing an Unauthenticated SMB hash capture via UNC path . The vulnerability is triggered over the network (attack vector: NETWORK) with low attack complexity and no authentication required, leading to a co...
CVE-2020-9324
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
CVE-2020-9324: Insufficiently Protected Credentials
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
PT-2020-20584
Name of the Vulnerable Software and Affected Versions Aquaforest TIFF Server version 4.0 Description The issue allows for unauthenticated SMB hash capture via UNC. Recommendations For Aquaforest TIFF Server version 4.0, consider restricting access to the SMB service until a patch is available. As...
tomcat: local privilege escalation
A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...
tomcat: local privilege escalation
A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...
CVE-2019-19756: Insertion of Sensitive Information into Log File
An internal product security audit of Lenovo XClarity Administrator LXCA discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update. Affected logs are...
Logic flaw vulnerability in Douphp lo***.php file
DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A logic flaw vulnerability exists in the Douphp lo.php file. Attackers can capture packets for blasting and obtain sensitiv...
HoneyBot - Capture, Upload And Analyze Network Traffic
HoneyBot is a set of scripts and libraries for capturing and analyzing packet captures with PacketTotal.com. Currently this library provides three scripts: capture-and-analyze.py - Capture on an interface for some period of time, and upload capture for analysis. upload-and-analyze.py - Upload and...
CVE-2020-10185: Authentication Bypass by Capture-replay
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...
Multi-Juicer - Run Capture The Flags And Security Trainings With OWASP Juice Shop
Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...
eLection 2.0 - (id) SQL Injection Vulnerability
Exploit for php platform in category web applications Title: eLection 2.0 - 'id' SQL Injection Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/projects/election-by-tripath/ Software Link: https://sourceforge.net/projects/election-by-tripath/files/Version 2.0 Tested on Ubuntu...