BSA-2018-700

Security Advisory ID : BSA-2018-700 Component : Apache Struts 2 Revision : 1.0: Final Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper actions have no or wildcard namespace. Same...

Cisco FireSIGHT System Remote Security Bypass Vulnerability

The Cisco FireSIGHT System is an integrated suite of network security and traffic management products that can be deployed on a dedicated platform or as a software solution. A URL-based remote security bypass vulnerability exists in the detection engine of the Cisco FireSIGHT System. The...

shit-server directory traversal vulnerability

shit-server is a file server. A directory traversal vulnerability exists in shit-server. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

F5 BIG-IP Policy Enforcement Manager URL Classification Denial of Service Vulnerability

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in the F5 BIG-IP Policy Enforcement Manager URL Classification, which allows an...

OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)

It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additiona...

Mozilla Firefox URL Loading Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in WebExtensions in versions of Mozilla Firefox prior to 56. A remote attacker can exploit the vulnerability to load about:URL...

Ctek SkyRouter Authentication Bypass Vulnerability

SkyRouter is a product from CTEK Sweden for managing wireless IP connections. An authentication bypass vulnerability exists in Ctek SkyRouter, which can be exploited by an attacker to bypass authentication restrictions and gain access to an application by accessing a specific Uniform Resource...

URL globbing out of bounds read

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

Authentication flaw

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

It was discovered that the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause a Java application to incorrectly parse an attacker supplied URL and interpret it differently from other applications processing the same URL...

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

It was discovered that the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause a Java application to incorrectly parse an attacker supplied URL and interpret it differently from other applications processing the same URL...

Google Chrome DevTools Access Restriction Vulnerability (CNVD-2016-06146)

Google Chrome is a web browsing tool developed by Google. Google Chrome has a security vulnerability. Due to incorrect handling of the hostname of a script path, it allows remote attackers to bypass intended access restrictions via URLs. Unlike CVE-2016-5143...

The vulnerability of the iOS operating system and the Safari browser allows a hacker to replace the displayed URL address, circumvent existing access restrictions, and obtain confidential information.

The vulnerability of the Page Loading component implemented in WebKit of the iOS operating system and the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to replace the displayed URL address, circumvent existing access...

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01843)

Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 and Safari...

HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HT...

Design/Logic Flaw

Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error...

Microsoft Office OneNote URL Validation Error (MS08-055; CVE-2008-3007)

Microsoft Office OneNote is a tool for note-taking, information gathering, and multi-user collaboration that visualizes notes as a two-dimensional page. A remote code execution vulnerability has been reported in the way that Microsoft Office handles specially crafted OneNote files. The...

UBUNTU-CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...