249 matches found
Uber: Email Enumeration Vulnerability
Hello, I identified from one of your disclosed reports : the report 143291 that you added "security measures to help mitigate email enumeration" . However , I found a way to identify valid emails registered on Uber.com . I used the SIGN UP form to find if an email is valid or not. Proof of concep...
RomPager 4.34 (Multiple Router Vendors) - 'Misfortune Cookie' Authentication Bypass
Title: Misfortune Cookie Exploit RomPager = 4.34 router authentication remover Date: 17/4/2016 CVE: CVE-2015-9222 http://mis.fortunecook.ie Vendors: ZyXEL,TP-Link,D-Link,Nilox,Billion,ZTE,AirLive,... Vulnerable models: http://mis.fortunecook.ie/misfortune-cookie-suspected-vulnerable.pdf Versions...
Snapchat: Administrator access to a Django Administration Panel on *.sc-corp.net via bruteforced credentials
Hey team, While doing some recon for Snapchat's domains, I came across a particular domain of interest - sc-corp.net. It seems that this domain hosts a lot of Snapchat's internal tools, web applications and staging environments such as Phabricator and other administration panels. From analyzing S...
Paragon Initiative Enterprises: CSRF AT SUBSCRIBE TO LIST
Hello, You Have Subscribe Form At http://paragonie.us11.list-manage2.com/subscribe?u=260ff2c88e0a7e103f01ccd79&id=8ddb8569ca When We Enter Details And Click on Subscribe. We Get Following Request Just Try to Add Email 'MERGE0' And Pass the Request , Attacker can Also send that Form Request to Bur...
The vulnerability of the RSView32 SCADA system, which allows a intruder to gain access to the SCADA system
The vulnerability of the password encryption algorithm used in SCADA systems like RSView32 is related to errors in the encryption algorithm itself. Exploiting this vulnerability could allow an intruder to gain access to the SCADA system and make unauthorized changes to the controlled technologica...
Revive Adserver: Login page password-guessing attack
Vulnerability description not provided...
The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.
The vulnerability of the SMBClient component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information in the kernel memory...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information
The vulnerability of the Login Window component in the Mac OS X operating system is related to errors in the settings for screen locking time. Exploiting this vulnerability can allow an intruder acting locally to gain access to protected information...
haproxy: information leak in buffer_slow_realign()
An implementation error related to the memory management of request and responses was found within HAProxy's bufferslowrealign function. An unauthenticated remote attacker could possibly use this flaw to leak certain memory buffer contents from a past request or session...
Burp Suite Professional 1.6.26 - The Leading Toolkit for Web Application Security Testing
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security...
The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to compromise the security of the protected information.
The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to errors in managing registration data. Exploiting this vulnerability could allow an intruder, operating locally, to compromise the security of protected information due to the storage of closed keys...
Burp Suite Professional v1.6.23 - The Leading Toolkit for Web Application Security Testing
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security...
Microsoft Word Intruder RTF FILE
Malicious word documents can be created using Microsoft Word Intruder MWI. This tool can be used in targeted attacks. Successful infection will allow the attacker to download additional malware to the target...
Burp Suite Professional v1.6.16 - The Leading Toolkit for Web Application Security Testing
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security...
SPCanywhere SSL Certificate Validation Security Restriction Bypass Vulnerability
SPCanywhere is the mobile app that allows remote access to Siemens SPC intruder alarm systems from your cell phone. SPCanywhere suffers from an SSL Certificate Validation Security Restriction Bypass vulnerability that stems from the application failing to properly validate an SSL certificate...
HackerOne: Restrict any user from logging into his account.
Hackerone's destroys user sessions automatically after signing out,changing password etc.So Old sessions are seems to be worthless for any attacker.But I found something,by exploiting this you can restrict any hackerone user to logging into his account. Pre-Requisition I just need one of his old...
Vimeo: No Limitation on Following allows user to follow people automatically!
Hello, i'm not sure it's intentional or somehow you missed it, I noticed that when User follow people on Vimeo, CSRF token of the request doesn't change at all. It's become something like a static code for a single session. ex: POST: https://vimeo.com/user12345 = ID POST CONTENT:...
Microsoft Windows 9x / Me Share Level Password Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It...
WebCom datakommunikation Guestbook 0.1 rguest.exe Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writing are vulnerable to an attack allowing ...
WebCom datakommunikation Guestbook 0.1 wguest.exe Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writing are vulnerable to an attack allowing ...