CVE-2017-2299

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the sslca parameter but do not specify the sslcertsdir parameter, a default will be provided for the sslcertsdir that will trust certificates from any of the...

Cisco Meeting Server Traversal Using Relay NAT Server Unauthorized Access Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States Cisco Cisco company's set of audio and video conferencing server software.Traversal Using Relay NAT TURN server is one of the multimedia application traversal server. A security vulnerability in the TURN...

Pornhub: Unsecured Elasticsearch Instance

The researcher has found an insecure Elasticsearch instance accessible to the public. A publicly accessible server running Elasticsearch instance was identified, due to a firewall misconfiguration. The instance was only intermittently accessible because of round robin ordering. The instance...

DEBIAN-CVE-2017-12873

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

Code injection

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

CVE-2017-12873

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

UBUNTU-CVE-2017-12873

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

CVE-2017-12873

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

CVE-2017-12873

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

CVE-2017-12873

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

CVE-2017-12873

SimpleSAMLphp 1.7.0–1.14.10 is affected by CVE-2017-12873 due to an incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured. This could allow attackers to obtain sensitive information or gain unauthorized access, depending on deployment specifics. The vulnerability...

GSA Bounty: Server Side Misconfiguration (EMAIL SPOOFING)

Hi team, Bug Type: Server Security Misconfiguration Mail Server Misconfiguration Missing SPF on Email Domain Weakness: Improper Authentication Description: i observe this when i send a email from [email protected] through http://emkei.cz/ to email [email protected] and afte...

CVE-2017-3107

Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability...

CVE-2017-3107

Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability...

Privilege escalation

Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability...

CVE-2017-3107

Adobe Experience Manager 6.3 and earlier suffers a misconfiguration vulnerability that can lead to information disclosure, specifically enabling a remote attacker to determine the product version. The issue is documented across multiple sources (NVD entry CVE-2017-3107, CNVD-2017-28749). No fix/v...

CVE-2017-3107

Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability...

PT-2017-7225 · Red Hat +1 · Openshift +1

Name of the Vulnerable Software and Affected Versions: OpenShift3 affected versions not specified Description: The issue allows remote authenticated users to access private images of other users if they know the image name. This is due to an access control misconfiguration in Kubernetes within...

Inteno Router Information Disclosure Vulnerability

Inteno routers is a wireless router from Inteno Broadband Technologies in Sweden. A security vulnerability exists in Inteno routers, which stems from the program's failure to properly configure JUCI ACLs, which can be exploited to read and write files and add a root SSH key by sending JSON comman...

Legal Robot: Subdomain misconfiguration [mail.legalrobot.com]

Hi Team, You subdomain mail.legalrobot.com has a CNAME record that resolved to ghs.google.com and shows error when navigating to subdomain, should remove CNAME entry for that subdomain pointing towards ghs.google.com.I couldn't verify the domain ownership process to fully takeover subdomain...