PT-2015-3347

Name of the Vulnerable Software and Affected Versions Red Hat JBoss A-MQ versions 6.x Red Hat BPM Suite BPMS versions 6.x Red Hat BRMS versions 5.x and 6.x Red Hat Data Grid JDG versions 6.x Red Hat Data Virtualization JDV versions 5.x and 6.x Red Hat Enterprise Application Platform versions 4.3....

Shopify: unauthorized access to all collections name

Hi admins can set tax rates in shopify admin panel https://SHOP.myshopify.com/admin/settings/taxes/ or ... they can add "Tax override" for specific collection, but this action didn't check ShopID! so we can add any collection id, and it will be add to our shop this also will works for "Hidden"...

Shopify: SSRF via 'Insert Image' feature of Products/Collections/Frontpage

Hi Security team, I would like to report an another SSRF issue like my previous bug 67377 https://hackerone.com/reports/67377. The description, threats, risks, exploatations are the same. The base request is the following POST /admin/settings/files.json HTTP/1.1 Host: test-4925.myshopify.com...

MongoDB Unauthenticated REST API Detection

The remote web server is running an unauthenticated REST API for MongoDB, a document-oriented database system. A remote attacker can exploit this API to read arbitrary collections from databases in the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid81778;...

Bugzilla Vulnerability Exposes Bug Collections

Hundreds of open source software projects that make use of Bugzilla, Mozilla’s bug-tracking software, anxiously await a patch for a vulnerability that exposes private bugs collected by the system. Mozilla is today expected to make available a patch for the vulnerability in its account creation...

(Plone): Partial denial of service through Collections functionality

It was discovered that Plone, included as a part of luci, did not properly handle the processing of requests for certain collections. A remote attacker could use a specially crafted URL that, when processed, would lead to excessive I/O and/or cache resource consumption...

Fedora Update for gthumb FEDORA-2011-5200

Check for the Version of gthumb OpenVAS Vulnerability Test Fedora Update for gthumb FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Google Chrome < 10.0.648.204 Multiple Vulnerabilities

Binary data 800965.prm...

Google Chrome < 10.0.648.204 Multiple Vulnerabilities

Binary data 5845.pasl...

Google Chrome < 10.0.648.204 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 10.0.648.204. Such versions of Chrome are affected by multiple vulnerabilities: - A buffer error exists in string handling functions. Issue 72517 - A use-after-free error exists in the processes for loading frames. Issue...

CVE-2010-4539

The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...

CVE-2010-4539

CVE-2010-4539 affects Apache Subversion's mod_dav_svn in versions shipped with Subversion prior to 1.6.15. The vulnerability is caused by a flaw in the walk function (repos.c) when processing SVNParentPath collections, allowing remote authenticated users to trigger a NULL pointer dereference and ...

CVE-2010-4539

The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...

Unfixed XSS vulnerability at www.jickenwings.org

Security researcher quangntenemy, has submitted on 10/01/2008 a cross-site-scripting XSS vulnerability affecting www.jickenwings.org, which at the time of submission ranked 701469 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It i...

imagealbum-sql.txt

ImageAlbum Remote SQL Injection Vulnerabilities ------------------------------------------------------------------------- Product: ImageAlbum Version: Latest 2.0.0b2, others not tested Vendor: http://imagealbum.sourceforge.net/ Date: 01/10/08 - Introduction ImageAlbum is a web application written...

IBM AIX Parallel Systems Support Program (PSSP) contains vulnerability in File Collections subsystem allowing arbitrary access to sensitive configuration files

Overview IBM AIX Parallel Systems Support Programs PSSP contains a vulnerability allowing unauthorized access to files in valid file collections. Description IBM PSSP software is used to provide a central point of management control for a cluster of RS/6000 SP nodes and IBM pSeries and IBM RS/600...

CVE-2000-0051

CVE-2000-0051 affects the Allaire Spectra Configuration Wizard. The vulnerability allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. CVSS: NETWORK, LOW complexity, no authentication, availability impact PARTIAL, base score 5.0 ...

CVE-2000-0051

The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL...

FreeBSD-SA-96:17.rzsz

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:17 Security Advisory Revised: Tue Jul 16 21:44:54 PDT 1996 FreeBSD, Inc. Topic: "Trojan Horse" vulnerability via rz program Category: ports Module: rzsz Announced:...