Security feature bypass

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass Vulnerability'...

Server side request forgery (ssrf)

In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request...

Thomson Reuters Concourse & Firm Central 2.13.0097 Directory Traversal / Local File Inclusion

Exploit for windows platform in category web applications ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Exploit Author: 0v3rride Vendor Homepage: https://www.thomsonreuters.com/en.html Software Link: Firm Central...

The vulnerability in the implementation of the Windows SMB network protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows SMB network protocol implementation in Windows operating systems is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using a specially crafte...

Information Leakage

Red Hat OpenShift Container Platform is vulnerable to information leakage. The vulnerability is possible because of a missing input validation in OpenShift request handling for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access ...

Microsoft Edge’s browser vulnerability, related to errors in request handling mechanisms, allows for breaches of the confidentiality and integrity of protected information.

The vulnerability of Microsoft Edge is related to errors in the request processing mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially crafted web page...

The vulnerability of the Microsoft .NET Framework software lies in errors related to the handling of specific web requests, which allows a hacker to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in the mechanism for processing special web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted request...

The vulnerability of Microsoft Edge browser, related to errors in request handling mechanisms, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to errors in the request processing mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially crafted web page...

Rancher < 1.6.25 / 2.0.9 / 2.1.3 Kubernetes Proxy Request Handling

The version of a Docker container of Rancher is prior to 1.6.25, 2.0.9, or 2.1.3 and, thus, is affected by a proxy request handling flaw contained in Kubernetes. A remote, unauthenticated attacker may be able to leverage API calls to escalate privileges via proxy request handling vulnerability...

CVE-2018-1000864

A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop...

CVE-2018-0700

YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of CPU and memory resources and may result in causing a denial of service condition...

CVE-2018-11759

The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was...

Access Restriction Bypass

gateway.transport.http is vulnerable to access restriction bypass. Access restriction controls can be bypassed due to improper HTTP request handling via a specially crafted HTTP request, allowing a remote attacker to obtain confidential information...

Micro Focus Enterprise Developer Denial of Service Vulnerability

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company. micro Focus Enterprise Developer is a set of integrated development environments for the mainframe. enterprise Server is a set of Enterprise Server is a production deployment platform for...

SUSE-SU-2018:2887-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a 'Transfer-Encoding: chunked' request, because the bucket brigade was mishandled in the phphandler function bsc1108753...

NUUO NVRMini2 3.8 Buffer Overflow

Exploit Title: NUUO NVRMini2 3.8 - 'cgisystem' Buffer Overflow Enable Telnet Date: 2018-09-17 Exploit Author: Jacob Baines Vendor Homepage: https://www.nuuo.com/ Device: NRVMini2 Software Link: https://www.nuuo.com/ProductNode.php?node=2 Versions: 3.8.0 and below Tested Against: 03.07.0000.0011 a...

Multiple Trend Micro Products Privilege Access Control Vulnerabilities

Trend Micro Premium Security and others are cross-platform antivirus products from Trend Micro that feature anti-ransomware, anti-malware email and system optimization. A privilege access control vulnerability exists in the handling of IDAMSPMASTER requests in multiple Trend Micro products, which...

Trend Micro OfficeScan Information Disclosure Vulnerability (CNVD-2019-06185)

Trend Micro OfficeScan provides protection against modern threats through anti-malware, ransomware protection, memory inspection, device control and and command and control C&C traffic. A "Named Pipeline Request Handling" out-of-bounds read disclosure vulnerability exists in Trend Micro OfficeSca...

CVE-2018-1999044

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop...

CVE-2018-1999044

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop...