Oxwall 1.7.4 Cross Site Request Forgery

Advisory ID: HTB23266 Product: Oxwall Vendor: http://www.oxwall.org Vulnerable Versions: 1.7.4 and probably prior Tested Version: 1.7.4 Advisory Publication: July 1, 2015 without technical details Vendor Notification: July 1, 2015 Vendor Patch: September 8, 2015 Public Disclosure: October 22, 201...

112 ipTIME Remote Code Execution Vulnerabilities

Many 112 ipTIME routers / modems / firewalls suffer from a remote root code execution vulnerability. Title: 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x00.txt.asc Date published:...

Authentication Flaw in PayPal mobile API Allows Access to Blocked Accounts

.jpg Payment services provider PayPal is vulnerable to an authentication restriction bypass vulnerability, which could allow an attacker to bypass a filter or restriction of the online-service to get unauthorized access to a blocked users’ PayPal account. The security vulnerability actually resid...

Blue Coat Reporter 9.1.x / 9.2.x Directory Traversal

Blue Coat Reporter Unauthenticated Directory Traversal ================================================================================= PUBLIC RELEASE My gift to Ekoparty Security Conference 2011 @ Argentina What a great event! 21/Sept/2011 PUBLIC RELEASE Vulnerability Information...

Fedora Update for firefox FEDORA-2008-6518

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Immunity Canvas: SPEECH

Name| speech ---|--- CVE| CVE-2007-2222 Exploit Pack| CANVAS Description| Microsoft Speech API 4v MS07-033 Notes| CVE Name: CVE-2007-2222 VENDOR: Microsoft MSADV: MS07-033 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS07-033.mspx CVE URL...

Immunity Canvas: STINKY_DEBUG

Name| stinkydebug ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Debug Notes| CVE Name: CVE-2005-3252 VENDOR: Stinky Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date...