CVE-2019-11013: Improper Limitation of a Pathname to a Restricted Directory

Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of the restricted directory on the remote server...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

Cross site request forgery (csrf)

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CVE-2018-17387 affects Nimble Messaging Bulk SMS Marketing Application 1.0. The issue is a Cross-Site Request Forgery (CSRF) that enables adding an admin account. CVSS3 base score 8.8 (HIGH) with NETWORK attack vector, UI required, and HIGH impact on confidentiality, integrity, and availability. ...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387: Cross-Site Request Forgery (CSRF)

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

Cloned Nimble volumes are not visible

Challenge By default, cloned Nimble Volumes are not shown in Veeam Backup and Replication UI and cannot be interacted with. However you can implement registry setting that will enable Nimble cloned volumes for interaction. Solution 1. Create the following registry value on the Veeam Backup and...

Moderate: Red Hat Security Advisory: openstack-cinder security and bug fix update

An update for openstack-cinder is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nimblelaw.com.au XSS vulnerability

Open Bug Bounty ID: OBB-586493 Description| Value ---|--- Affected Website:| nimblelaw.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Nimble Professional 1.0 Cross Site Request Forgery

Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin) Vulnerability

Exploit for php platform in category web applications Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile 0day.today 2018-02-15...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)

Nimble Professional 1.0 - Cross-Site Request Forgery Update Admin Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)

Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

app.nimble.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-172480 Description| Value ---|--- Affected Website:| app.nimble.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

connect.nimblestorage.com XSS vulnerability

Vulnerable URL: https://connect.nimblestorage.com/community/data-protection/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:|...