PT-2018-4746

Name of the Vulnerable Software and Affected Versions geoip-lite-country versions prior to 1.1.4 Description The issue concerns the insecure download of data resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. In scenarios where an attacker has a privileged network...

CVE-2016-10568: Missing Encryption of Sensitive Data

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

PT-2018-4858

Name of the Vulnerable Software and Affected Versions adamvr-geoip-lite versions affected versions not specified Description The issue affects the integrity and availability of geoip data, which may alter the decisions made by an application using this data. This is due to the package downloading...

CVE-2016-10680: Missing Encryption of Sensitive Data

adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an...

Etherpad Lite Access Control Bypass Vulnerability

Etherpad Lite is the Etherpad Foundation's suite of open source rich text online collaboration software. A security vulnerability exists in the webaccess.js file in Etherpad Lite versions prior to 1.6.4. A remote attacker can exploit this vulnerability by sending a specially crafted request to...

CVE-2018-9845

Etherpad Lite before 1.6.4 is exploitable for admin access...

Design/Logic Flaw

Etherpad Lite before 1.6.4 is exploitable for admin access...

CVE-2018-9845

Etherpad Lite before 1.6.4 is exploitable for admin access...

CVE-2018-9845

Etherpad Lite before 1.6.4 is exploitable for admin access...

CVE-2018-9845

Etherpad Lite before version 1.6.4 is vulnerable to an admin authentication bypass that allows an attacker to gain admin access. The issue is documented across multiple sources (NVD, Nuclei template, SUSE, CNVD, OSV, etc.) with the root cause described as an admin-privilege bypass affecting Ether...

CVE-2018-9845

Etherpad Lite before 1.6.4 is exploitable for admin access...

UPDATE: P4wnP1 v0.1.0-alpha1

PenTestIT RSS Feed P4wnP1 update time guys and this time it is the P4wnP1 v0.1.0-alpha1, the first pre-built image! It has almost been a year since I last posted about this Raspberry Pi based, customizable USB attack platform and yet, what an update! Read on! What is P4wnP1? P4wnP1 is a highly...

PT-2018-19069

Name of the Vulnerable Software and Affected Versions Etherpad Lite versions prior to 1.6.4 Description The issue allows for exploitation to gain admin access. Recommendations For versions prior to 1.6.4, update to version 1.6.4 or later to resolve the issue...

CVE-2018-9845: Improper Handling of Case Sensitivity

Etherpad Lite before 1.6.4 is exploitable for admin access...

Buffer overflow

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2017-17313

The CVE-2017-17313 entry concerns Huawei P9 Lite devices with multiple firmware versions (VNS-L21C02B341, VNS-L21C22B380, VNS-L31C02B341, VNS-L31C440B390, VNS-L31C636B396 and earlier). The vulnerability is a buffer overflow in the inputhub driver caused by lack of parameter validation. An attacke...

CVE-2017-17313: Improper Restriction of Operations within the Bounds of a Memory Buffer

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...