Kali Linux 2021.1 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates. The summary of the changelog since the 2020.4 release from November 2020 is: Xfce 4.16 - Our preferred and current default desktop environment has been updated and tweaked KDE 5.20 - Plasma also...

Eclipse Hawkbit Access Control Error Vulnerability

Eclipse hawkBit is a domain-independent backend framework from the Eclipse Foundation. It is used to roll out software updates to constrained edge devices. Eclipse Hawkbit has a security vulnerability in versions prior to 0.3.0M7 where the http404 not found JSON response body returned by restapi...

Design/Logic Flaw

In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 Not Found JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client...

Eclipse hawkBit 跨站脚本漏洞

Eclipse hawkBit is a domain-independent backend framework from the Eclipse Foundation. It is used to roll out software updates to constrained edge devices. Eclipse Hawkbit has a security vulnerability in versions prior to 0.3.0M7 where the http404 not found JSON response body returned by restapi...

curl: Parallel upload hangs curl if upload file not found

Attempting to upload -T a not found file with parallel -Z flag present, will cause curl to get stuck and never terminate, potentially stalling scripts that make use of this particular flags. curl -T blabla-notexists -Z upload.example.com www.google.com www.cnn.com www.apple.com Same issue occurs ...

UBUNTU-CVE-2016-11086

lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information...

CVE-2020-14016

An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2020-52848)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira versions prior to 8.9.1 that stems from the program's various resources using ...

REST API for Add user to group returns error 400 instead of 404 when the user does not exist

h3. Issue Summary REST API for Add user to group returns error 400 instead of 404 when the user does not exist. According to the documentation of JIRA 8.5.3|https://docs.atlassian.com/software/jira/docs/api/REST/8.5.3/api/2/group-addUserToGroup when the user or group does not exist, an error 404...

jetty: error path information disclosure

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches...

"Description cannot be found" error in event logs in Event Viewer in Windows Server 2012 R2 or Windows Server 2012

"Description cannot be found" error in event logs in Event Viewer in Windows Server 2012 R2 or Windows Server 2012 Introduction This article describes an issue in which the "Description cannot be found" error message is displayed in the event logs in Windows 8.1, Windows RT 8.1, Windows Server 20...

Opening 404 page (page not found) without user session will open 404 page instead of opening login page.

h3. Issue Summary Opening a random page on Crowd with a user that is not authenticated will display "Page not found" 404 page instead of the login page. h3. Steps to Reproduce Make sure you are not logged in. Try to open BaseURL/ABC h3. Expected Results As you do not have session information you...

Storefront 3.12 CU5 Error: Propagation failed on one or more Servers

PROBLEM: When administrator launches Storefront Management Console and attempts to perform "Propagate Changes" on Servers , the process fails with the following error: Error: Propagation failed on one or more Servers Event logs on Primary Server shows the following event: Event ID 31 An error has...

CVE-2019-10227

openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component...

CVE-2019-10227

openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component...

Cross site scripting

openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component...

CVE-2019-10227

openITCOCKPIT before 3.7.1 is affected by a reflected XSS in the 404-not-found component. The CVE details confirm the issue (XSS) and that a fixed version is 3.7.1. The vulnerability is non-authenticated per CVSS2/3.1 vectors, with impact to integrity. Publicly documented remediation is upgrading...

CVE-2019-10227

openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component...

inanum.co.kr Cross Site Scripting vulnerability

Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting inanum.co.kr website and its users. Following coordinated an...

StoreFront Cannot Complete your request - Access is denied. Contact your system administrator. - No endpoint listening at net.pipe

StoreFront event log shows Access is denied. Contact your system administrator. System.ServiceModel.EndpointNotFoundException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 There was no endpoint listening at net.pipe://localhost/Citrix/Authentication/Win32...