5092 matches found
Drupal Core Full config export configuration file unauthorized download vulnerability
Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...
Cisco IOS XR NCS 6000 Packet Timer Leak DoS (cisco-sa-20160713-ncs6k)
The version of Cisco IOS XR running on the remote NCS 6000 device is affected by a denial of service vulnerability due to improper management of system timer resources. An unauthenticated, remote attacker can exploit this, via numerous management connections to the affected device, to consume...
[SECURITY] [DSA 3654-1] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3654-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3654-1 (quagga - security update)
Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. CVE-2016-4036 Tams Nmeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handling man...
Debian DSA-3654-1 : quagga - security update
Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. - CVE-2016-4036 Tamas Nemeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. - CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handli...
CVE-2016-1426: Undefined Security Weakness
Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service timer consumption and Route Processor reload via crafted SSH traffic, aka Bug ID CSCux76819...
Route Validation Bypass
Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...
Pornhub: XSS ReflectedGET /*embed_player*?
The researcher discovered a reflected XSS in the embedplayer route...
Voyager: Route Planner - External URLs, MIT license, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Voyager: Route Planner published at the 'play' market has multiple vulnerabilities...
GPS Route Finder Maps - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application GPS Route Finder Maps published at the 'play' market has multiple vulnerabilities...
Map and Route - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Map and Route published at the 'play' market has multiple vulnerabilities...
GPS Driving Route - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GPS Driving Route published at the 'play' market has multiple vulnerabilities...
Driving Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Driving Route Finder published at the 'play' market has multiple vulnerabilities...
ROUTE 66 Navigate - WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application ROUTE 66 Navigate published at the 'play' market has multiple vulnerabilities...
Falk Maps & Route Planner - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Falk Maps & Route Planner published at the 'play' market has multiple vulnerabilities...
Munich Metro MVG Map & Route - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Munich Metro MVG Map & Route published at the 'play' market has multiple vulnerabilities...
Sales Rep Route Planner - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sales Rep Route Planner published at the 'play' market has multiple vulnerabilities...
GPS Route Finder - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GPS Route Finder published at the 'play' market has multiple vulnerabilities...
GPS Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GPS Route Finder published at the 'play' market has multiple vulnerabilities...
The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.
The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot by sending an IPv4 ICMP packet with the IP Record Route option...