CVE-2017-8040

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE XML External Entity attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the...

CVE-2017-8040

CVE-2017-8040 affects Pivotal Cloud Foundry (PCF) Single Sign-On: XXE vulnerability in the SSO dashboard. Versions 1.3.x before 1.3.4 and 1.4.x before 1.4.3 are vulnerable; privileged users can upload malformed XML, potentially exposing data on the SSO service broker filesystem. Root cause is XML...

CVE-2017-8041

CVE-2017-8041 affects Pivotal Cloud Foundry’s Single Sign-On (PCF SSO). The vulnerability is a cross-site scripting flaw in the org-name field on certain SSO UI pages, exploitable in PCF SSO versions 1.3.x before 1.3.4 and 1.4.x before 1.4.3. The described impact is that a remote attacker can cau...

PT-2017-18086

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF versions prior to 1.3.4 Pivotal Cloud Foundry PCF versions prior to 1.4.3 Description A user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization...

CVE-2017-8040: Improper Restriction of XML External Entity Reference

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE XML External Entity attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the...

CVE-2017-8041: Improper Neutralization of Input During Web Page Generation

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name...

PT-2017-18085

Name of the Vulnerable Software and Affected Versions Single Sign-On for Pivotal Cloud Foundry PCF versions 1.3.x prior to 1.3.4 Single Sign-On for Pivotal Cloud Foundry PCF versions 1.4.x prior to 1.4.3 Description An XXE XML External Entity attack was discovered in the Single Sign-On service...

Legal Robot: Wrong password validation message

Hello, Your password validation message seems to be contradicting with the server side validation of password field during new account sign up at https://app.legalrobot.com/sign-in. When you start typing in password field, it says Passwords must be more than 8 characters but when you type more th...

Mautic SSO/OAuth2 Plugin Cross-Site Request Forgery Vulnerability

Mautic is an open source marketing automation management software developed and maintained by the Mautic community. The software has features such as monitoring websites, creating web pages and sending emails.Mautic SSO/OAuth2 is one of the single sign-on plug-ins based on the OAuth2 a secure log...

Legal Robot: Improper error message

Hi team, First of all congrats for good work to enforced the new password security policy during registration but the password error banner is not updated as per the changes. During registration it only shows the error when i enter the password if is is less than 8 chars. but if i enter the 8+...

CVE-2015-1878

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key KNETI and impersonate the nShield Connect device on a network, affect...

PT-2017-6535

Name of the Vulnerable Software and Affected Versions Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ versions prior to 11.72 Description The issue allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device...

Netscaler - 11.1 - SSO Failure with RDP Proxy

1. When connecting to RDP via NS gateway CVPN bookmarks, the RDP window terminates with error An Internal error has occurred. 2. Netscaler resets the back-end connection withreset code of 9952 dropping connection due to SSL received fatal alert 3. Disabled SSO using...

Confusing Self-Driving Cars by Altering Road Signs

Researchers found that they could confuse the road sign detection algorithms of self-driving cars by adding stickers to the signs on the road. They could, for example, cause a car to think that a stop sign is a 45 mph speed limit sign. The changes are subtle, though -- look at the photo from the...

gtk-vnc security, bug fix, and enhancement update

0.7.0-2 - Fix reserved data size rhbz 1416783 - Fix inverted args in tests rhbz 1416783 - Avoid sign extension problems rhbz 1416783 - Fix crash with opening via GSocketAddress rhbz 1416783 - Fix crash & error reporting during connection timeout rhbz 1441120 - Fix incompatibility with libvncserve...

Khan Academy: Weak Bithdate Validation Implemented on Sign Up

The Birthdate Field on the KhanAcademy's Sign Up page for new users has the year range from 2017 to 1897. F210177 However, while signing up for a new account, I was able to set the year to 1033 by manipulating the data being sent to the server and the account was successfully created. I can also...

PT-2017-19228 · Sma Solar Technology · Sunny Boy Tlst-21 +3

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products, specifically Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 Description: An issue in SMA Solar Technology products allows information disclosure when a user signs into Sunny Explorer with an...

Legal Robot: Lack of input validation in e-mail & user name, job title, company name field

Hi, During sign up input validation didn't deploy properly on e-mail & name field. I've tested inputing following e-mail during sign up: hacker%@gmail.com Your system send email to verification the account though the e-mail address is invalid as gmail doesn't allow user to sign up using special...

[SECURITY] Fedora 26 Update: heimdal-7.4.0-1.fc26

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

collectd: Infinite loop due to incorrect interaction of parse_packet() and parse_part_sign_sha256() functions

collectd contains an infinite loop due to how the parsepacket and parsepartsignsha256 functions interact. If an instance of collectd is configured with "SecurityLevel None" and empty "AuthFile" options, an attacker can send crafted UDP packets that trigger the infinite loop, causing a denial of...