The vulnerability of the application configuration for managing servers using CentOS Web Panel allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the application configuration for CentOS Web Panel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by modifying the administrator’s email address...

The vulnerability of the configuration parameters of McAfee Data Loss Prevention Endpoint for Windows allows a perpetrator to circumvent existing security restrictions and gain access to user sessions.

The vulnerability of the configuration parameters of McAfee Data Loss Prevention Endpoint for Windows-related endpoints is related to incorrect authentication. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and gain access to user sessions...

CVE-2019-18579

Settings for the Dell XPS 13 2-in-1 7390 BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt and PCIe behind TBT pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's...

CVE-2019-18579

Settings for the Dell XPS 13 2-in-1 7390 BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt and PCIe behind TBT pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's...

CVE-2019-18579

CVE-2019-18579 affects the Dell XPS 13 2‑in‑1 (7390) BIOS prior to version 1.1.3, where the default setting Enable Thunderbolt (and PCIe behind TBT) pre‑boot modules was enabled. This enables a local, unauthenticated attacker with physical access to perform a pre‑boot DMA attack and gain read/wri...

CVE-2014-0241

CVE-2014-0241 concerns rubygem-hammer_cli_foreman where the file /etc/hammer/cli.modules.d/foreman.yml is world-readable, enabling a local user to read potentially sensitive configuration data (e.g., usernames or passwords) as the underlying issue. Public sources in the provided documents corrobo...

Apache Httpd mod_proxy - Error Page Cross-Site Scripting

The trick is to use a vertical tab %09 and then place another URL in the tag. So once a victim clicks the link on the error page, she will go somewhere else. As you can see, the browser changes the destination from relative / to an absolute url https://enoflag.de. The exploit is...

logrotten 3.15.1 - Privilege Escalation

Exploit Title: logrotten 3.15.1 - Privilege Escalation Date: 2019-10-04 Exploit Author: Wolfgang Hotwagner Vendor Homepage: https://github.com/logrotate/logrotate Software Link: https://github.com/logrotate/logrotate/releases/tag/3.15.1 Version: all versions through 3.15.1 Tested on: Debian...

CVE-2019-6649

F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings...

Ubuntu: Security Advisory (USN-4100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1552

OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versio...

The vulnerability of the built-in software of the “Granit-Navigator-6.18” device arises from the absence of a mechanism for authenticating users during device configuration. This allows attackers to read and modify the device’s configuration parameters, thereby enabling system compromise.

The vulnerability of the built-in software of the “Granit-Navigator-6.18” device is due to the absence of a mechanism for authenticating users during device configuration using SMS commands. Exploiting this vulnerability allows a remote attacker to read and modify the device’s configuration...

Cross site request forgery (csrf)

An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request...

CVE-2019-4293

IBM Storwize V7000 Unified 2073 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699...

CVE-2019-8391

CVE-2019-8391 affects qdPM 9.1 with a Cross-site Scripting (XSS) flaw exploitable via the configuration page parameter type (type=[XSS]). The vulnerability arises from unsafely handling the type parameter, enabling script injection in web pages accessed by users. Public exploit examples exist (e....

CVE-2018-4059

CVE-2018-4059 affects coturn (TURN/STUN server). The issue is an unsafe default configuration: by default the TURN server runs an unauthenticated telnet admin portal on the loopback interface, allowing an attacker with telnet access to gain administrator rights over the TURN server. Impact can in...

web.config File Information Disclosure

An information disclosure vulnerability exists in the remote web server due to the disclosure of the web.config file. An unauthenticated, remote attacker can exploit this, via a simple GET request, to disclose potentially sensitive configuration information. C Tenable Network Security, Inc...

CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

August Connect Information Disclosure Vulnerability

August Connect is a bridge device for supporting Wi-Fi and smart lock connections. A security vulnerability exists in August Connect that stems from the program failing to securely transfer data between the August app and August Connect during configuration. An attacker could exploit the...

CVE-2018-18995

Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing...