The vulnerability of the IBM DB2 database management system allows attackers to circumvent existing access restrictions and delete arbitrary rows from tables.

The vulnerability of the Data Movement implementation in the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions and delete arbitrary rows from the tables...

The vulnerability of the Red Hat Enterprise Linux operating system allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the grub2 loader in the Red Hat Enterprise Linux operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code using a specially created multiboot or...

Mozilla Firefox < 42.0 Multiple Vulnerabilities

Binary data 9018.prm...

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...

Cisco Connected Grid Network Management System Elevation of Privilege Vulnerability

Cisco Connected Grid Network Management System CG-NMS is an end-to-end smart grid management system from Cisco. A security vulnerability exists in the web GUI of Cisco CG-NMS version 3.00.35 and 3.00.54. A remote attacker can exploit the vulnerability via the Monitor-Only role to bypass establish...

CVE-2015-7395: Improper Access Control

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 FP002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for...

用友企业空间APP权限绕过泄露大量内部资料

简要描述： 也来玩玩移动安全 详细说明： 网址为 http://upesn.com。在web版里只找到几个xss，于是下载了app看看。 然而app用了360的加密，菜鸟表示不知道怎么逆向了。。 smali └── com └── qihoo └── util └── StubApplication.smali 虚拟机运行app抓包，终于找到个有问题的地方： 这里会有个请求： 其中的id就是该企业的公告id，可以通过修改id越权查看其他企业的公告。 用 burp suite 跑了下： 一大堆内部资料。。 漏洞证明： img...

CVE-2015-4997

IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...

PT-2015-2447

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.0.15 Description The issue is related to the Web Service component, which has inadequate access restrictions. This allows remote attackers to bypass intended access restrictions. The vulnerability is associated...

CVE-2015-5954

The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5 does not consider that NULL is a valid getPath return value, which allows remote authenticated users to bypass intended access restrictions and gain access to users files via a sharing link to a fil...

PT-2015-2461

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 6.0.9 ownCloud Server versions 7.0.x prior to 7.0.7 ownCloud Server versions 8.0.x prior to 8.0.5 Description The virtual filesystem in ownCloud Server does not consider that NULL is a valid getPath return...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to circumvent existing access control rules and gain access to protected information.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to circumvent existing access controls and gain access to protected...

The vulnerability of Firefox and Firefox ESR browsers allows attackers to bypass existing access restrictions and perform a redirect to a specified URL.

The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and perform a redirect to a specified URL using specially crafted JavaScript code...

Oracle: Security Advisory (ELSA-2015-0895)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the iOS operating system, which allows a hacker to bypass existing access control rules

The vulnerability of the WebKit component of the iOS operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially crafted website...

The vulnerability of the iOS operating system, which allows a hacker to circumvent existing access control rules

The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access control rules remotely...

ADH-Web Server IP-Cameras - Multiple Vulnerabilities

ADH-Web Server IP-Cameras - Multiple Vulnerabilities 1. Adivisory Information Title: ADH-Web Server IP-Cameras Improper Access Restrictions EDB-ID: 38245 Advisory ID: OLSA-2015-0919 Advisory URL: http://www.orwelllabs.com/2015/10/adh-web-server-ip-cameras-improper.html Date published: 2015-09-19...

ADH-Web Server IP-Cameras - Multiple Vulnerabilities

Adivisory Information Title: ADH-Web Server IP-Cameras Improper Access Restrictions EDB-ID: 38245 Advisory ID: OLSA-2015-0919 Advisory URL: http://www.orwelllabs.com/2015/10/adh-web-server-ip-cameras-improper.html Date published: 2015-09-19 Date of last update: 2016-02-15 Vendors contacted:...

CVE-2015-7229: Undefined Security Weakness

The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access permissions, which allows remote authenticated users to post tweets to arbitrary accounts by leveraging the 1 "post to twitter" permission or change the options...

The vulnerability of Safari browser and iOS operating system allows attackers to circumvent access control rules.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass access controls by using mechanisms for controlling embedded video content remotely...