2650 matches found
HackerOne: Invited team member can disclosure slack channels
Summary: Hello, this report is similar to 505493 also still waiting for response, but accent is totally on another thing. I think it is important and should be fixed, and so i create new report. Invited team member without any permission can disclosure private channel names of slack integration. ...
CVE-2018-1974
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
Code injection
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
CVE-2018-1974
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
CVE-2018-1974
CVE-2018-1974 affects IBM MQ (WebSphere MQ) 8.x and 9.x. The issue allows an authenticated attacker to escalate privileges when using multiplexed channels, due to how channels are multiplexed. Affected products/versions include IBM MQ v8 (8.0.0.0–8.0.0.10), MQ v9 LTS (9.0.0.0–9.0.0.5), MQ v9.1 CD...
CVE-2018-1974
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
Security Bulletin: IBM MQ is vulnerable to a privilege escalation attack when using multiplexed channels (CVE-2018-1974)
Summary IBM MQ could allow an authenticated attacker to escalate their privileges with channels that have multiplexing enabled. Vulnerability Details CVEID: CVE-2018-1974 DESCRIPTION: IBM MQ could allow an authenticated attacker to escalate their privileges when using multiplexed channels. CVSS...
PT-2019-2904 · Sox +2 · Sox +2
Name of the Vulnerable Software and Affected Versions: SoX versions 14.4.2 Description: The issue is related to an integer overflow in the channels start function of the SoX audio editor, which can lead to a heap-based buffer overflow. This can be exploited by a remote attacker to cause a denial ...
CVE-2018-18354
creationtimestamp| type| source ---|---|--- 2019-02-07 12:43:39+00:00| published-proof-of-concept| https://t.me/antichat/3530 2019-02-07 17:30:06+00:00| published-proof-of-concept| https://t.me/news4hack/251 2019-03-12 01:23:41+00:00| published-proof-of-concept| https://t.me/R0Crew/943...
CVE-2018-18311
creationtimestamp| type| source ---|---|--- 2019-02-07 08:30:33+00:00| published-proof-of-concept| https://t.me/novitollch/13 2019-02-08 06:11:34+00:00| published-proof-of-concept| https://t.me/novitollch/12 2019-02-21 01:55:08+00:00| published-proof-of-concept| https://t.me/novitollch/19...
DEBIAN-CVE-2018-18505
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
Mozilla: Privilege escalation through IPC channel messages
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
Mozilla: Privilege escalation through IPC channel messages
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
UBUNTU-CVE-2018-18505
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
Hacking the GCHQ Backdoor
Last week, I evaluated the security of a recent GCHQ backdoor proposal for communications systems. Furthering the debate, Nate Cardozo and Seth Schoen of EFF explain how this sort of backdoor can be detected: In fact, we think when the ghost feature is active -- silently inserting a secret...
Information Disclosure
rhc-chk.rb in Red Hat OpenShift Origin is vulnerable to information disclosure. When -d debug mode is used, the output of the process contains confidential information such as the plaintext database passwords. This leads to unintentional disclosure of confidential in support channels such as a...
Design/Logic Flaw
DISPUTED main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for preventing a CSRF attack has been provided https://community.microstrategy.com/s/article/KB37643-New-security-feature-introduced-in-MicroStrategy-Web-9-0?language=enUS...
PT-2023-15450 · Unknown +1 · Gpac Mp4Box +1
Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the eac3 update channels function, located in the media tools/av parsers.c file at line 9113. This function is part of the GPAC MP4box...