SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2018:3815-1)

This update for salt fixes the following issues : Security issues fixed : CVE-2018-15750: Fixed directory traversal vulnerability in salt-api bsc1113698. CVE-2018-15751: Fixed remote authentication bypass in salt-apinetapi that allows to execute arbitrary commands bsc1113699. Non-security issues...

openSUSE Security Update : salt (openSUSE-2018-1569)

This update for salt fixes the following issues : Security issues fixed : - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api bsc1113698. - CVE-2018-15751: Fixed remote authentication bypass in salt-apinetapi that allows to execute arbitrary commands bsc1113699. Non-security...

openSUSE: Security Advisory for salt (openSUSE-SU-2018:4174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for salt (important)

This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api bsc1113698. - CVE-2018-15751: Fixed remote authentication bypass in salt-apinetapi that allows to execute arbitrary commands bsc1113699. Non-security issue...

CVE-2018-7067

A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web...

CVE-2018-7067

Aruba ClearPass Policy Manager vulnerability CVE-2018-7067 is an authentication bypass in the administrative API that can lead to complete cluster compromise. A remote attacker who can reach the admin web interface via the API can bypass authentication and take control of the entire ClearPass clu...

SUSE SLES11 Security Update : salt (SUSE-SU-2018:3813-1)

This update for salt fixes the following issues : Salt was updated to version 2016.11.10 and contains the following fixes : Security issues fixed : CVE-2018-15750: Fixed directory traversal vulnerability in salt-api bsc1113698. CVE-2018-15751: Fixed remote authentication bypass in salt-apinetapi...

CVE-2018-19109

CVE-2018-19109 affects Tianti 2.3. A remote authenticated user can bypass intended permission restrictions by directly visiting the admin path tianti-module-admin/cms/column/list to read the column list page or edit a column. The available connected sources consistently describe a privilege-restr...

UBUNTU-CVE-2018-15751

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-apinetapi...

CVE-2018-17341

BigTree 4.2.23 on Windows is affected. When Advanced or Simple Rewrite routing is enabled, authentication can be bypassed via a ..\ substring in the URL (example: launch.php?bigtree_htaccess_url=admin/images/..). This is a remote-auth bypass vulnerability described across NVD, Red Hat, OSV, CVE d...

Cisco ASA and FWSM Security Advisories

Overview On October 9, 2013, Cisco released two security advisorieshttp://www.us-cert.gov/ncas/current-activity/2013/10/10/Cisco-Releases-Security-Advisories concerning multiple vulnerabilities within software for the following components: Cisco Adaptive Security Appliance ASA...

CVE-2017-10935

The CVE-2017-10935 vulnerability affects ZTE ZXR10 1800-2S with ZSRV2 firmware versions prior to V3.00.40. A remote authenticated attacker can bypass the original password authentication and change another user’s password, enabling account compromise. The risk is mitigated by upgrading to ZSRV2 V...

CVE-2018-1612

IBM QRadar Incident Forensics IBM QRadar SIEM 7.2, and 7.3 could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164...

CVE-2016-9482

CVE-2016-9482 affects the PHP FormMail Generator code; an unauthenticated remote user can bypass authentication and reach the administrator panel by accessing /admin.php?mod=admin&func=panel. Documents consistently describe an authentication bypass in the code generated by PHP FormMail Generator....

CVE-2018-11635

Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to bypass authentication...

IIJ SmartKey App for Android Information Disclosure Vulnerability

IIJ SmartKey App for Android is an Android-based application from Internet Initiative Japan IIJ that provides two-factor authentication for websites. A security vulnerability exists in IIJ SmartKey App for Android. A remote attacker can exploit the vulnerability to bypass authentication...

UserPro Plugin for WordPress up_auto_log Parameter Remote Authentication Bypass

The UserPro Plugin for WordPress running on the remote web server is prior to version 4.9.17.1 It is, therefore, affected by a remote authentication bypass vulnerability. A remote, unauthenticated attacker can exploit this vulnerability, via a specially crafted request, to login as an...

SAP ERP Remote Authentication Bypass Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. A remote authentication bypass vulnerability exists in...

Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass

''' Exploit Title: Interspire Email Marketer - Remote Admin Authentication Bypass Google Dork: intitle:"Control Panel" + emailmarketer Date: 4-22-18 Exploit Author: devcoinfet Vendor Homepage: www.interspire.com/emailmarketer Software Link: Can't legally provide link but can be found on net...

PT-2018-3874 · Pulnix +7 · Pulnix +10

Name of the Vulnerable Software and Affected Versions: TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login Description: The issue allows remote attackers to bypass authentication via a "Cookie: uid=admin"...