The vulnerability of the SQR component in the PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected data.

The vulnerability of the SQR component in the PeopleSoft Enterprise PeopleTools business application suite is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP protocol...

CVE-2018-12237

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

Command injection

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

CVE-2018-12237

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

CVE-2018-12237

CVE-2018-12237 affects the Symantec Reporter CLI (Reporter CLI) by an OS command injection vulnerability. Affected: Reporter CLI versions 10.1 before 10.1.5.6 and 10.2 before 10.2.1.8. Root cause: command injection via the CLI that can be exploited by an authenticated administrator with Enable mo...

CVE-2018-12237

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

Symantec (Blue Coat) Reporter CLI OS Command Injection Vulnerability (SYMSA1465)

According to its self-reported version number, the Symantec formerly Blue Coat Reporter installation running on the remote host is 10.1 prior to 10.1.5.6 or 10.2 prior to 10.2.1.8. It is, therefore, affected by an OS command injection vulnerability. An authenticated attacker with Enable mode...

Symantec Reporter CLI OS Command Injection Vulnerability

Symantec Reporter CLI is a command line tool from Symantec USA. The tool is primarily used to manage and change network settings. An operating system command injection vulnerability exists in Symantec Reporter CLI, which can be exploited by a remote attacker to execute arbitrary operating system...

OS Command Injection Vulnerability in Reporter CLI

SUMMARY The Symantec Reporter CLI is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges. AFFECTED PRODUCTS Reporter --- CVE | Supported Versions | Remediation...

ybhaber.com XSS vulnerability

Open Bug Bounty ID: OBB-719915 Description| Value ---|--- Affected Website:| ybhaber.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

couturejewellery.com XSS vulnerability

Open Bug Bounty ID: OBB-718512 Description| Value ---|--- Affected Website:| couturejewellery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Mizuho Bank Mizuho Direct App for Android fails to verify SSL server certificates

Overview Mizuho Bank Mizuho Direct App for Android fails to verify SSL server certificates. Mizuho Bank Mizuho Direct App for Android provided by Mizuho Bank, Ltd. fails to verify SSL server certificates CWE-295. Reo Yoshida reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the...

macOS < 10.14 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.13.6 or is not macOS 10.14. It is, therefore, affected by multiple vulnerabilities in the following components : - afpserver - AppleGraphicsControl - Application Firewall - App Store - APR - ATS - Auto Unlock - Bluetooth -...

cucumber-html-reporter-common-functions (>=1.0.24, <=1.0.32), cucumber-report-generator (1.0.3) +10 more potentially affected by CVE-2017-16077 via mongose (0.0.2-security)

mongose NPM version 0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on mongose and may be impacted: - cucumber-html-reporter-common-functions =1.0.24, =1.0.0, =1.0.7, =1.0.58, =1.0.12, =1.0.17, =1.1.11 - owltech 1.0.0 - reports-server 1.0.0...

Apple macOS Mojave and iOS Crash Reporter Information Disclosure Vulnerability

Apple macOS Mojave and iOS are both products of Apple Inc. Apple macOS Mojave is a dedicated operating system developed for Mac computers. iOS is an operating system developed for mobile devices. Crash Reporter is a component that debugs programs and records all test information. A security...

Veeam ONE Reporter error "Failed to RetrieveProperties: Insufficient privileges"

Challenge Veeam ONE Reporter shows the following error message during the Object properties collection task: 2018-01-08 03:00:10.3791 ERROR 5984 18 EXCEPTION: Permission to perform this operation was denied. 2018-01-08 03:00:12.9585 ERROR 5984 18 EXCEPTION: Failed to RetrieveProperties: ""...

Acunetix WVS Reporter 10.0 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Acunetix WVS Reporter 10.0 - Denial of Service PoC Exploit Author: Ali Alipour Vendor Homepage : https://www.acunetix.com/ Tested on : Windows 10 - 64-bit Steps to Reproduce Run the python exploit script, it will create a new file...

Acunetix WVS Reporter 10.0 Denial Of Service

Exploit Title: Acunetix WVS Reporter 10.0 - Denial of Service PoC Exploit Author: Ali Alipour Date: 2018-08-22 Vendor Homepage : https://www.acunetix.com/ Tested on : Windows 10 - 64-bit Steps to Reproduce Run the python exploit script, it will create a new file with the name "exploit.txt" just...

177.190.254.18 XSS vulnerability

Open Bug Bounty ID: OBB-670399 Description| Value ---|--- Affected Website:| 177.190.254.18 Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13391

The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and from version 7.11.0 before version 7.11.2 allows remote...