CVE-2017-12229

The CVE describes an authentication bypass in the REST API of Cisco IOS XE Web UI (versions 3.1–16.5) caused by insufficient input validation. An unauthenticated, remote attacker could bypass REST API authentication and access the web UI if the device has HTTP Server enabled. The issue affects Ci...

Cisco IOS XE Software Web UI REST API Authentication Bypass Vulnerability

A vulnerability in the REST API of the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication to the REST API of the web UI of the affected software. The vulnerability is due to insufficient input validation for the REST A...

PT-2017-2982

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 16.5 Description A vulnerability in the REST API of the web-based user interface of Cisco IOS XE could allow an unauthenticated, remote attacker to bypass authentication by sending a malicious API request to a...

EMC Data Protection Advisor < 6.4.130 Hardcoded Password Vulnerability

According to its self-reported version number, the EMC Data Protection Advisor running on the remote host is 6.3.x prior to 6.3 patch 67 or 6.4.x prior to 6.4 patch 130. It is, therefore, affected by a default credential vulnerability due to hardcoded passwords with the Apollo System Test,...

Cross site request forgery (csrf)

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

DEBIAN-CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

UBUNTU-CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

PYSEC-2017-47

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5607: Cross-Site Request Forgery (CSRF)

Cross-site request forgery in the REST API in IPython 2 and 3...

Dynamic Application Security Test Orchestration: Webbreaker

Build functional security testing, into your software development and release cycles! WebBreaker provides the capabilities to automate and centrally manage Dynamic Application Security Testing DAST as part of your DevOps pipeline. WebBreaker truly enables all members of the Software Security...

WordPress REST API Plugin Information Disclosure (CVE-2017-5487)

An information disclosure vulnerability exists in WordPress REST API Plugin. Successful exploitation could result in the disclosure of sensitive user information...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the REST server. An attacker can execute commands as the user by producing a malicious link that, if clicked while the user is logged in, exploits the server. PoC Attacker puts something like this int...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337: Improper Authentication

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

PT-2017-13399

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.80 Description The issue arises when MISP is configured with X.509 certificate authentication in conjunction with an external user management ReST API. If this API returns an empty value for an external user providin...