The vulnerability of the SSH Dropbear session management software lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of the SSH Dropbear session management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using the percent symbol “%” as a format specifier in arguments for “username” or “host”...

Pivotal Single Sign-On for PCF Cross-Site Scripting Vulnerability

Pivotal Single Sign-On for PCF is a suite of single sign-on security access tools for PCFs from Pivotal Software, USA. A security vulnerability exists in Pivotal Single Sign-On for PCF versions 1.3.x prior to 1.3.4 and 1.4.x prior to 1.4.3. An attacker can exploit the vulnerability by injecting...

Services single sign-on client - Critical - Cross-site scripting - SA-CONTRIB-2017-087

This module allows users of a remote Services-enabled Drupal site to sign on to a second site with their credentials. The module does not sanitize information from the request before displaying it, thereby exposing a cross-site scripting vulnerability...

CVE-2017-8044

In Pivotal Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks...

CVE-2017-8044

Pivotal Single Sign-On for PCF is affected in versions 1.3.x prior to 1.3.4 and 1.4.x prior to 1.4.3. The vulnerability is a DOM-based XSS where code injected via query parameters can execute in the browser environment. Connected sources corroborate the same vulnerability description across multi...

CVE-2017-8044: Improper Neutralization of Input During Web Page Generation

In Pivotal Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks...

PT-2017-18087

Name of the Vulnerable Software and Affected Versions Pivotal Single Sign-On for PCF versions 1.3.x prior to 1.3.4 Pivotal Single Sign-On for PCF versions 1.4.x prior to 1.4.3 Description The issue allows code to be injected into the DOM environment through query parameters, leading to XSS attack...

Repo password on display for the world to see.

I just noticed that my machine user name and password are on display above the commit dialog. Since this job site uses single sign on for everything, that's my username and password for the entire system here. I have three different repos loaded in Sourcetree. Because of single sign on, that is...

Repo password on display for the world to see.

I just noticed that my machine user name and password are on display above the commit dialog. Since this job site uses single sign on for everything, that's my username and password for the entire system here. I have three different repos loaded in Sourcetree. Because of single sign on, that is...

Catalyst Mahara User Login Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara versions 15.04 prior to 15.04.8, 15.10 prior to 15.10.4, and 16.04 prior to 16.04.2, which stems fr...

Simple ASC Content Management System Cross-Site Scripting Vulnerability

Simple ASC Content Management System is a web content management system. The system uses an Access database and allows you to manage the content of your website through an administration panel. A cross-site scripting vulnerability exists in the location field of the 'sign' function in Simple ASC...

OpenAM Authentication Bypass Vulnerability

ForgeRock OpenAM Open Source Edition is the United States ForgeRock company's set of open source single sign-on framework SSO, which provides core identity services Core Server to achieve a transparent single sign-on in a network architecture such as centralized, distributed single sign-on. A...

Design/Logic Flaw

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

PT-2017-14304

Name of the Vulnerable Software and Affected Versions Simple ASC Content Management System version 1.2 Description The issue is related to a XSS in the location field in the sign function. It affects files such as guestbook.asp, formgb.asp, and msggb.asp. Recommendations For Simple ASC Content...

CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

cloudlgs.com XSS vulnerability

Open Bug Bounty ID: OBB-353277 Description| Value ---|--- Affected Website:| cloudlgs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

RHEL 6 : rh-sso7-keycloak (RHSA-2017:2904)

An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 7.1 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : rh-sso7-keycloak (RHSA-2017:2905)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2905 advisory. Red Hat Single Sign-On is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-o...