1949 matches found
glibc protection bypass
It may be possible to bypass some restriction because of incorrect .. seqence processing in locale related functions...
ownCloud 6.0.0a - Multiple Vulnerabilities
No description provided by source. Exploit Title: ownCloud 6.0.0a File Deletion XSS and CSRF Protection Bypass Vendor Homepage: www.ownCloud.org OwnCloud Version: 6.0.0a Browsers tested: Iceweasel 22.0; Internet Explorer 11; Server: Debian. Default LAMP set-up. Exploit Author: James Sibley absane...
FCKEditor ASP 2.6.8 - File Upload Protection Bypass
0 0 0 0...
PT-2014-4133
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue concerns the Lock Screen in Apple iOS, which fails to properly manage the telephony state when in Airplane Mode. This allows an attacker with physical proximity to bypass the lock...
OpenStack multiple security vulnerabilities
Heart information leakage, Cinder privilege escalation, Nova multiple vulnerabilities, Neutron protection bypass...
Google Chrome / Chromium multiple security vulnerabilities
Protection bypass, use-after-free, memory corruptions, integer overflow...
OpenPAM protection bypass
In some situations policy from valid location may not be loaded...
X (Formerly Twitter): [mobile.twitter.com / twitter.com] CSRF protection bypass
I shall explain all the steps to create the final PoC in order to be more clear. Part 1. Cookie Injection via Google Analytics 1 Google Analytics sets the cookie to track user source: 123456.123456789.11.2.utmcsr=HOST|utmccn=referral|utmcmd=referral|utmcct=PATH For example:...
Apple Mac OS X multiple security vulnerabilities
Information disclosures, memory corruptions, DoS, privilege escalations, protection bypass...
flash-plugin: security protection bypass (APSB14-14)
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518,...
flash-plugin: security protection bypass (APSB14-14)
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517,...
flash-plugin: security protection bypass (APSB14-14)
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517,...
Microsoft Office multiple security vulnerabilities
Memory corruptions, buffer overflows, protection bypass...
Openswan / Strongswan security vulnerabilities
Buffer overflow, DoS, protection bypass...
PT-2016-7858
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.17 phpMyAdmin versions 4.4.x through 4.4.15.8 phpMyAdmin versions 4.6.x through 4.6.4 Description An issue was discovered due to a bug in serialized string parsing, allowing bypass of the protection...
Plex Media Server multiple security vulnerabilities
Information leakage, protection bypass, CSRF...
Apple TV multiple security vulnerabitilies
Unsafe cookie handling, protection ypass, information leakage, multiple WebKit vulnerabilities...
WinSCP proteciton bypass
Server X.509 certificate is not validated...