Security Bulletin: RMI Dispatcher port used by Security Identity Adapters is not authenticated by default

Summary The RMI Dispatcher listening port does not require authentication by default. The Dispatcher has added credential checking to ensure only authenticated users have adapter access. Vulnerability Details CVEID: CVE-2017-1483 DESCRIPTION: IBM Security Identity Adapters do not perform an...

orlandosentinel.com XSS vulnerability

Open Bug Bounty ID: OBB-624416 Description| Value ---|--- Affected Website:| orlandosentinel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SAP Message Server Service Detection

A SAP Message Server Service is running at this host. SAP Message Server is for - Central communication channel between the individual application servers instances of the system - Load distribution of logons using SAP GUI and RFC with logon groups - Information point for the Web Dispatcher and t...

Distributed YARA Malware Scanning System: KLara project

Klara project is aimed at helping Threat Intelligence researchers hunt for new malware using Yara . In order to hunt efficiently for malware, one needs a large collection of samples to search over. Researchers usually need to fire a Yara rule over a collection / set of malicious files and then ge...

CVE-2018-6010

In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php...

The vulnerability of the component’s dispatcher in SageCRM’s customer relationship management system allows a hacker to increase their privileges and impact the confidentiality, integrity, and accessibility of data.

The vulnerability of the component dispatcher in SageCRM’s customer relationship management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to increase their privileges and compromise the confidentiality, integrity, and...

rsanic (>=0.1.1 <=0.4.0), sanic-cors (>=0.4.1 <=0.4.1.4) +1 more potentially affected by CVE-2017-16762 via sanic (>=0.3.1 <=0.5.0)

sanic PYPI version =0.3.1, =0.1.1, =0.4.1, =0.5.0, =0.5.0.1 Source cves: CVE-2017-16762 Source advisory: OSV:PYSEC-2017-40...

SAP Web Dispatcher Remote Code Execution Vulnerability

SAP Web Dispatcher is the core component of Load Balancing and supports load balancing. A remote code execution vulnerability exists in SAP Web Dispatcher, which can be exploited by an attacker to execute arbitrary code...

CVE-2016-3888

internal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism, and send premium SMS messages during the...

The vulnerability of Google Chrome browser allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability in the PPAPI implementation of the Google Chrome browser is related to the lack of verification for the source of IPC messages for the plugin process management system. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanism by sending messages...

Kaspersky Internet Security KLIF Driver NtUserCreateWindowEx_HANDLER Denial of Service

Summary A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can ru...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s print queue dispatcher service is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder, operating locally, to enhance their privileges through vectors related to file system writing operations...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system’s print queue dispatcher is related to security configuration errors. Exploiting this vulnerability allows a perpetrator performing a “man-in-the-middle” attack to execute arbitrary code using a specially crafted print driver during printer...

CVE-2016-3640

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

CVE-2016-3640

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

Design/Logic Flaw

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

CVE-2016-3640

The SAP HANA DB vulnerability CVE-2016-3640 affects Extended Application Services (XS/XS Engine) in SAP HANA DB version 1.00.091.00.1418659308. The issue allows local users to disclose sensitive password information via vectors related to passwords in Web Dispatcher trace files (as described in S...

CVE-2016-1706

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation, known as the “use-after-free error” in the Freebsoft Laboratory Speech Dispatcher module. Exploiting this vulnerability allows malicious actors to cause service interruptions application freezes or othe...

Google Chrome Competitive Conditions Vulnerability (CNVD-2016-03259)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 50.0.2661.102 have a contention condition vulnerability in the 'ResourceDispatcherHostImpl::' function in the file content/browser/loader/resourcedispatcherhostimpl.cc. BeginRequest'...