2639 matches found
Dell OpenManage Server Administrator 8.2 - Authenticated Directory Traversal
Exploit for windows platform in category web applications Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...
CVE-2016-1905
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object...
The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.
The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...
The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.
The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...
CVE-2016-0011
Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting XSS attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different...
The vulnerability of the IBM DB2 database management system allows attackers to circumvent existing access restrictions and delete arbitrary rows from tables.
The vulnerability of the Data Movement implementation in the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions and delete arbitrary rows from the tables...
The vulnerability of the Red Hat Enterprise Linux operating system allows a hacker to bypass security restrictions and execute arbitrary code.
The vulnerability of the grub2 loader in the Red Hat Enterprise Linux operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code using a specially created multiboot or...
Mozilla Firefox < 42.0 Multiple Vulnerabilities
Binary data 9018.prm...
ntp: drop packets with source address ::1
It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...
Cisco Connected Grid Network Management System Elevation of Privilege Vulnerability
Cisco Connected Grid Network Management System CG-NMS is an end-to-end smart grid management system from Cisco. A security vulnerability exists in the web GUI of Cisco CG-NMS version 3.00.35 and 3.00.54. A remote attacker can exploit the vulnerability via the Monitor-Only role to bypass establish...
用友企业空间APP权限绕过泄露大量内部资料
简要描述： 也来玩玩移动安全 详细说明： 网址为 http://upesn.com。在web版里只找到几个xss，于是下载了app看看。 然而app用了360的加密，菜鸟表示不知道怎么逆向了。。 smali └── com └── qihoo └── util └── StubApplication.smali 虚拟机运行app抓包，终于找到个有问题的地方： 这里会有个请求： 其中的id就是该企业的公告id，可以通过修改id越权查看其他企业的公告。 用 burp suite 跑了下： 一大堆内部资料。。 漏洞证明： img...
CVE-2015-4997
IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...
Oracle: Security Advisory (ELSA-2015-0895)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to circumvent existing access control rules and gain access to protected information.
The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to circumvent existing access controls and gain access to protected...
The vulnerability of Firefox and Firefox ESR browsers allows attackers to bypass existing access restrictions and perform a redirect to a specified URL.
The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and perform a redirect to a specified URL using specially crafted JavaScript code...
The vulnerability of the iOS operating system, which allows a hacker to bypass existing access control rules
The vulnerability of the WebKit component of the iOS operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially crafted website...
The vulnerability of the iOS operating system, which allows a hacker to circumvent existing access control rules
The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access control rules remotely...
ADH-Web Server IP-Cameras - Multiple Vulnerabilities
Adivisory Information Title: ADH-Web Server IP-Cameras Improper Access Restrictions EDB-ID: 38245 Advisory ID: OLSA-2015-0919 Advisory URL: http://www.orwelllabs.com/2015/10/adh-web-server-ip-cameras-improper.html Date published: 2015-09-19 Date of last update: 2016-02-15 Vendors contacted:...
ADH-Web Server IP-Cameras - Multiple Vulnerabilities
ADH-Web Server IP-Cameras - Multiple Vulnerabilities 1. Adivisory Information Title: ADH-Web Server IP-Cameras Improper Access Restrictions EDB-ID: 38245 Advisory ID: OLSA-2015-0919 Advisory URL: http://www.orwelllabs.com/2015/10/adh-web-server-ip-cameras-improper.html Date published: 2015-09-19...
The vulnerability of Safari browser and iOS operating system allows attackers to circumvent access control rules.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass access controls by using mechanisms for controlling embedded video content remotely...