CVE-2016-9177

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Baidu Spark Browser 43.23.1000.476 - Address Bar URL Spoofing

Exploit for windows platform in category dos / poc Software Link:http://en.browser.baidu.com/query/fullpackage.exe?lang=en Version:43.23.1000.476 Tested on:Win7/WinXP details: The baidu spark browser is vulnerable to Address Bar Spoofing in the latest version of the browser43.23.1000.476. Using t...

Baidu Spark Browser 43.23.1000.476 - Address Bar URL Spoofing

Baidu Spark Browser 43.23.1000.476 - Address Bar URL Spoofing Software Link:http://en.browser.baidu.com/query/fullpackage.exe?lang=en Version:43.23.1000.476 Tested on:Win7/WinXP details: The baidu spark browser is vulnerable to Address Bar Spoofing in the latest version of the...

Baidu Spark Browser 43.23.1000.476 - Address Bar URL Spoofing

Software Link:http://en.browser.baidu.com/query/fullpackage.exe?lang=en Version:43.23.1000.476 Tested on:Win7/WinXP details: The baidu spark browser is vulnerable to Address Bar Spoofing in the latest version of the browser43.23.1000.476. Using the specail javascript code it was able to spoof the...

Cisco Spark REST Interface Information Disclosure Vulnerability

Cisco Spark is a collaboration services solution. A security vulnerability exists in Cisco Spark's REST interface that allows a remote attacker to obtain sensitive information via a request file...

Cisco Spark REST Interface Access Bypass Vulnerability

Cisco Spark is a collaboration services solution. A security vulnerability in the REST interface of Cisco Spark allows remote attackers to bypass established access restrictions by sending web requests to create arbitrary user accounts...

Cisco Spark REST Interface Denial of Service Vulnerability

Cisco Spark is a collaboration services solution. A security vulnerability in the REST interface of Cisco Spark allows remote attackers to perform a denial of service by accessing the administration page...

CVE-2016-1324

The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service resource outage by accessing an administrative page, aka Bug ID CSCuv84125...

CVE-2016-1324

The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service resource outage by accessing an administrative page, aka Bug ID CSCuv84125...

CVE-2016-1323

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

CVE-2016-1323

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

Design/Logic Flaw

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

Design/Logic Flaw

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

Design/Logic Flaw

The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service resource outage by accessing an administrative page, aka Bug ID CSCuv84125...

CVE-2016-1324

CVE-2016-1324 affects Cisco Spark’s REST interface (Cisco Spark 2015-06). The issue arises from missing authorization checks on certain administrative pages, enabling an unauthenticated, remote attacker to cause a denial of service (resource outage) by accessing an admin page. Cisco’s advisory Ci...

CVE-2016-1322

The CVE-2016-1322 case concerns Cisco Spark’s REST interface, where improper authorization controls allow an unauthenticated, remote attacker to bypass access restrictions and create arbitrary user accounts. Multiple sources (NVD/NVDCNVD, CNVD, CVE list, and Cisco advisory) corroborate that the R...

CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

CVE-2016-1323

The CVE-2016-1323 entry concerns Cisco Spark’s REST interface. The vulnerability allows an authenticated, remote attacker to view sensitive information by requesting a file from the REST API. The underlying cause is insufficient protections of sensitive data, enabling information disclosure. AFFE...