CVE-2020-7943

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types which may contain sensitive information as well as function names...

Exploit for CVE-2019-1458

CVE-2019-1458: Going from 'in the wild report' to POC Intr...

Information Disclosure Vulnerability in RICOH printers

Overview Multiple RICOH printers contain Information Disclosure CWE-200. RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership. Impact A user who ca...

A day^W^W Several months in the life of Project Zero - Part 2: The Chrome exploit of suffering

Posted by Sergei Glazunov and Mark Brand, Project Zero Introduction After we’d understood how the bug worked, and had passed on those details to Chrome to help them get started on a fix, we went back to our other projects. This bug remained a topic of discussion, and eventually we ran out of...

CVE-2013-3091

An Authentication Bypass vulnerability in Belkin N300 F7D7301v1 router allows remote attackers to bypass authentication using "Javascript debugging."...

Authentication flaw

An Authentication Bypass vulnerability in Belkin N300 F7D7301v1 router allows remote attackers to bypass authentication using "Javascript debugging."...

CVE-2013-3091

An Authentication Bypass vulnerability in Belkin N300 F7D7301v1 router allows remote attackers to bypass authentication using "Javascript debugging."...

CVE-2013-3091: Improper Authentication

An Authentication Bypass vulnerability in Belkin N300 F7D7301v1 router allows remote attackers to bypass authentication using "Javascript debugging."...

IBM Security Directory Server Information Disclosure Vulnerability (CNVD-2020-04412)

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. IBM Security Directory Server version 6.4.0 is deployed using...

CVE-2019-4550

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952...

CVE-2019-4550

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952...

Code injection

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952...

CVE-2019-4550

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952...

CVE-2019-4550

IBM Security Directory Server 6.4.0 is affected by a vulnerability where active debugging code creates unintended entry points, enabling potential information exposure. The issue is documented across multiple sources (NVD entry CVE-2019-4550; CNVD-2020-04412) with a MEDIUM severity (CVSSv3.1 base...

CVE-2019-4550: Undefined Security Weakness

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952...

Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Directory Server

Summary Multiple security vulnerabilities have been fixed and delivered in IBM Security Directory Server. Vulnerability Details CVEID: CVE-2019-4551 DESCRIPTION: IBM Security Directory Server does not perform an authentication check for a critical resource or functionality allowing anonymous user...

Information Disclosure

nifi-parameter is vulnerable to information disclosure. The parameter parser logs parsed values for debugging purposes. The values can contain confidential information such as usernames and passwords...

CVE-2020-1928

An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal values entered in a sensitive property when no parameter was present...

CVE-2020-1928

An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal values entered in a sensitive property when no parameter was present...

h1-ctf: [h1-415 2020] SSRF in a headless chrome with remote debugging leads to sensible information leak

Summary: Converter is using headless chrome with remote debbuging by rendring a page where we have out name, with which we can get xss leads to ssrf By using the remote debbugging with that ssrf we can grab the info all tabs in that chrome wher we can get even the flag document. Steps To Reproduc...