CVE-2013-6355

CVE-2013-6355 is rejected/not used; reference CVE-2014-6355 instead.

tomcat: Incorrect handling of pipelined requests when send file was used

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure...

CVE-2017-1000124

CVE-2017-1000124 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2016-9717

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...

WakaTime: Session Duplication due to Broken Access Control

Due to improper validation of user before generating an API-KEY and improper measures taken at the time of password reset, it is possible to generate a parallel session at the attacker's end. Proof of concept video is attached to confirm the vulnerability and to demonstrate the Impact of this...

WakaTime: Session Duplication due to Improper Validation

Initially at the time of sign-up the user is able to enter any email-id and account is created without any verification. Later a pop-up arises for verification, but all functions are available without verification. Attacker can use victims email and create an account, he can work on wakatime as t...

Now It's Easier than Ever to Steal Someone's Keys

The website key.me will make a duplicate key from a digital photo. If a friend or coworker leaves their keys unattended for a few seconds, you know what to do...

CVE-2015-0955

CVE-2016-0955 is an XSS vulnerability in Adobe Experience Manager (AEM) 6.1.0. The issue arises from how a folder title field is handled in the Deletion popup dialog, enabling remote authenticated users to inject arbitrary web script or HTML. The connected sources confirm the affected product/ver...

Nextcloud: SQL exception in JSON format

Hi, I know this is not critical, just a design issue, but it will be better if it will not show up to the user as an error, maybe in log files readable to the www-user or to the root user in order to debug. PoC: ---------------------- 1. Create a user and confirm the password 2. Capture the packe...

tomcat: information disclosure due to incorrect Processor sharing

A bug was discovered in the error handling of the send file code for the NIO HTTP connector. This led to the current Processor object being added to the Processor cache multiple times allowing information leakage between requests including, and not limited to, session ID and the response body...

CVE-2016-9725

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing CORS, which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference : 1999539...

SUSE-SU-2017:0554-1 Security update for util-linux

This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...

CVE-2016-1000106

CVE-2016-1000106 is a duplicate of CVE-2016-5388; the connected records confirm CVE-2016-5388 is the httpoxy proxy-injection issue in Apache Tomcat CGI handling. Affected Tomcat versions require upgrading: Tomcat 6.x to at least 6.0.47, Tomcat 7.x to at least 7.0.72, and Tomcat 8.x to at least 8....

Researchers Bypass Chip and Pin Protections at Black Hat

LAS VEGAS – Credit card companies for the most part have moved away from “swipe and signature” credit cards to chip and pin cards by this point; the technology known as EMV Europay, MasterCard, and Visa which is supposed to provide consumers with an added layer of security is beginning to see som...

CVE-2016-5389

CVE-2016-5389 is rejected; this candidate is a reservation duplicate of CVE-2016-5696 and not active.

Bt2 - Blaze Telegram Backdoor Toolkit

bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation $ sudo pip install telepot $ sudo pip install requests PS:...

CVE-2015-6264

CVE-2015-6264 is a reserved duplicate of CVE-2016-1349. Connected sources confirm a Cisco Smart Install client DoS in Cisco IOS 12.2/15.0/15.2 and IOS XE 3.2–3.7, exploitable remotely via crafted image-list parameters in a Smart Install packet, causing device reload. Remediation is via Cisco soft...

Microsoft Windows 8.1/10 (x86) - Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032)

/ Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=687 https://googleprojectzero.blogspot.ca/2016/03/exploiting-leaked-thread-handle.html Windows: Secondary Logon Standard Handles Missing Sanitization EoP Platform: Windows 8.1, Windows 10, not testing on Windows 7 Class: Elevati...

Fedora 23 : perl-5.22.1-351.fc23 (2016-5d4fc5ecc9)

Fix manipulating environment variables to align with how glibc handles duplicated environment variables. Perl now uses the first variable listed in the environment array and it removes any subsequent entries of the same-named variable from the array, so that child processes have only one variable...

CVE-2016-0717

CVE-2016-0717 is a reservation/duplicate of CVE-2016-0729. Connected documents confirm CVE-2016-0729: Open Source Apache Xerces-C XML Parser vulnerability causing DoS (bounds checking during parsing/reporting) with CVSS 7.3. Affected IBM products include InfoSphere Optim (On Demand/Data Privacy/D...