CVE-2017-4999

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...

PT-2017-16255

Name of the Vulnerable Software and Affected Versions EMC RSA Archer versions 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, 5.5.3.1 Description The issue is related to an authorization bypass through a user-controlled key vulnerability in Discussion Forum Messages. A remote low-privileged attacker...

CVE-2017-4999

CVE-2017-4999 pertains to EMC RSA Archer across multiple 5.x releases (e.g., 5.4.1.3, 5.5.x). The vulnerability is an authorization bypass in the Discussion Forum Messages component caused by handling of input via user-controlled keys, enabling a remote, low-privileged attacker to elevate privile...

CVE-2017-4999: Exposure of Sensitive Information to an Unauthorized Actor

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...

EMC RSA Archer Privilege Bypass Vulnerability

EMC RSA Archer is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A privilege bypass vulnerability exists in EMC RSA Archer. A remote...

bricoleurdudimanche.com XSS vulnerability

Vulnerable URL: http://www.bricoleurdudimanche.com/?page=recherche-forum=alert/OPENBUGBOUNTY/...

dietfacts.com XSS vulnerability

Vulnerable URL: http://www.dietfacts.com/forum.asp?replyid=6943=1"...

Authorization Bypass

Moodle is vulnerable to authorization bypass. The library does not consider if a forum is optional, allowing a malicious user to bypass forum-subscription requirements through the student role and unsubscribing from all forums...

MyBB 1.8.12 Stored XSS / File Enumeration Vulnerabilities

MyBB versions 1.8.12 and prior is vulnerable to a cross site scripting bug which can allow a moderator to take over an administrator's account and upload a webshell, or perform file enumeration in the instances where it is not possible to spawn a shell...

The vulnerability of the CAF repository in the Android operating system allows a hacker to cause the device to freeze.

The vulnerability of the CAF repository in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to become unresponsive in a “hang” state by utilizing the...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/python Title : EFS Web Server 7.2 POST HTTP Request Buffer Overflow Author : Touhid M.Shaikh Date : 12 June, 2017 Contact: [email protected] Version: 7.2 category: Remote Exploit Tested on: Windows XP SP3 EN Version 5.1.2600 """ Description What is Easy File Sharing Web Server 7....

Easy File Sharing Web Server 7.2 - Authentication Bypass Vulnerability

Exploit for windows platform in category remote exploits Exploit Title: EFS Web Server 7.2 Authentication Bypass Date: 11-06-2017 Software Link: http://www.sharing-file.com/efssetup.exe Software Version : 7.2 Exploit Author: Touhid M.Shaikh Contact: http://twitter.com/touhidshaikh22 Website:...

netsarang.com XSS vulnerability

Vulnerable URL: https://www.netsarang.com/forum/xftp/list?status=1=10type="'--!...

nlc.p3k.hu XSS vulnerability

Vulnerable URL: http://nlc.p3k.hu/forum/?fid=441==45548=1"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosur...

The vulnerability of the OEM microprogramming software component of Qualcomm Secure Execution Environment allows a perpetrator to trigger a service failure or exert other effects on the system.

The vulnerability of the OEM microprogramming software component of Qualcomm Secure Execution Environment for Android, originating from the CAF repository, is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to trigger service failures or cause other...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows a hacker to gain access to local files.

The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to gain access to local files...

Bypass Access Restrictions

Moodle is vulnerable to access restrictions being bypassed. Authenticated users can leverage the student role to bypass access restrictions and read the RSS feed for a forum. This is possible because mod/forum/rsslib.php does not correctly implement the requirement for posting before reading a Q...

Session Key Disclosure

Moodle is vulnerable to session key disclosure.If anonymous front-page forum is enabled, remote attackers can obtain session keys for their own sessions by visiting the front page...

Cross-site Request Forgery (CSRF)

Moodle is vulnerable to cross-site request forgery CSRF attacks. The attacks exist because the checking of session keys is not done in markposts.php, allowing an attacker to hijack an authentication of user for requests that marks forum posts as read...

dafmotoren.nl XSS vulnerability

Vulnerable URL: http://www.dafmotoren.nl/forum/search.asp?mode=DoIt Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9835737 VIP website status:| No Check dafmotoren.nl SSL...