CVE-2017-1000085

Subversion Plugin connects to a user-specified Subversion repository as part of form validation e.g. to retrieve a list of tags. This functionality improperly checked permissions, allowing any user with Item/Build permission but not Item/Configure to connect to any web server or Subversion server...

PT-2017-10790

Name of the Vulnerable Software and Affected Versions Subversion Plugin versions prior to 2.9 Description The Subversion Plugin has a functionality that connects to a user-specified Subversion repository as part of form validation. This functionality improperly checked permissions, allowing any...

Logic design flaws in the Ten Cent Share app

Dime Share app is a smart ad push platform that enables users to get cash rewards by clicking on business information posters. A logical design vulnerability exists in the Dime Share app. An attacker can reset and log into other users' systems by capturing authentication codes in a packet...

jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303)

Subversion Plugin improperly checked permissions, requiring just Item/Build instead of Item/Configure when used. This allows a user to specify an attacker-controlled Subversion server which can then be used to collect credentials used by the Subversion plugin...

New Relic: https://rpm.newrelic.com/login vulnerable to host header attack

It appears that https://rpm.newrelic.com/login is vulnerable to a host header attack flaw whereas the HTTP Host header can be controlled by a malicious user. POC: curl -H "Host: rpm.newrelic.com" -H "X-Forwarded-Host: geeknik.com" https://rpm.newrelic.com/login Result: You are being redirected. A...

PT-2015-4126

Name of the Vulnerable Software and Affected Versions IBM Notes Traveler Companion application versions 1.0 through 1.1 before 201411010515 Description The issue makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message, due ...

CVE-2014-8921: Exposure of Sensitive Information to an Unauthorized Actor

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials b...

Design/Logic Flaw

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940...

PT-2015-3721

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect affected versions not specified Description The issue is related to improper host type verification, which allows remote attackers to spoof authentication forms and possibly capture credentials. Recommendations At the moment,...

CVE-2014-3314: Improper Input Validation

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940...

PT-2014-5283 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions 8.2 through 8.25.50 Cisco ASA Software versions 8.3 through 8.32.41 Cisco ASA Software versions 8.4 through 8.47.22 Cisco ASA Software versions 8.6 through 8.61.13 Cisco ASA Software versions 9.0 through 9.04.23...

openstack-horizon: persistent XSS in Horizon Host Aggregates interface

A persistent cross-site scripting XSS flaw was found in the horizon host aggregate interface. A user with sufficient privileges to add a host aggregate could potentially use this flaw to capture the credentials of another user...

PT-2013-4829

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 Description The issue allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified...

UBUNTU-CVE-2012-0647

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

PT-2012-2755

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.1.4 Description The issue is related to how WebKit in Apple Safari handles redirects in conjunction with HTTP authentication. This might allow remote web servers to capture credentials by logging the...

CVE-2011-2361

Google Chrome before 13.0.782.107 has a vulnerability in the Basic Authentication dialog where improper handling of strings could allow remote attackers to capture credentials via a crafted web site (CVE-2011-2361). The issue is tied to Chrome’s authentication UI/Basic Auth dialog, with corrobora...

CVE-2011-2361: Improper Authentication

The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site...

CVE-2011-2361

The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site...

PT-2011-3800

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue is related to the Basic Authentication dialog implementation in Google Chrome, which does not properly handle strings. This could make it easier for remote attackers to capture...

Design/Logic Flaw

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors...