Dodocool DC38 N300 - Cross-site Request Forgery

Exploit Title: DODOCOOL DC38 N300 Cross-site Request Forgery Date: 17-01-2018 Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: DODOCOOL Vendor Homepage: www.dodocool.com Version: RTN2-AW.GD.R3465.1.20161103 CVE: CVE-2018-5720 I DESCRIPTION...

GLSA-201711-09 : LXC: Remote security bypass

The remote host is affected by the vulnerability described in GLSA-201711-09 LXC: Remote security bypass Previous versions of lxc-attach ran a shell or the specified command without allocating a pseudo terminal making it vulnerable to input faking via a TIOCSTI ioctl call. Impact : Remote attacke...

LXC: Remote security bypass

Background LinuX Containers userspace utilities Description Previous versions of lxc-attach ran a shell or the specified command without allocating a pseudo terminal making it vulnerable to input faking via a TIOCSTI ioctl call. Impact Remote attackers can escape the container and perform...

CVE-2017-10624

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1...

CVE-2017-10624

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1...

Authorization

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1...

CVE-2017-10624

CVE-2017-10624 affects Juniper Networks Junos Space prior to version 17.1R1, stemming from insufficient verification of node certificates. This can enable a network-attacker to perform a man-in-the-middle attack, potentially modifying the Space database or adding nodes. Connected documents corrob...

Unauthorised Modification

moodle is vulnerable to unauthorised modifications. A malicious user can bypass an activity's read-only state by using the student role and modify the database...

Inteno EG101R1 VoIP Router - unauthorized modifications to DNS

No description provided by source. if $ -gt 3 || $ -lt 2 ; then echo " Inteno EG101R1 VoIP Router " echo " Unauthenticated Remote DNS Change Exploit" echo " ===================================================================" echo " Usage: $0 " echo " Example: $0 133.7.133.7 8.8.8.8" echo "...

CVE-2016-0888

EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...

CF Image Host 1.65 - Cross-Site Request Forgery

input type="text"...

Security Misconfiguration Vulnerability in the AWS SDK for PHP

SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. - Aws\Ec2 - Added support for...

Important: 389-ds-base

Issue Overview: A flaw was found in the authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. Affected Packages: 389-ds-base Issue...

MGASA-2015-0183 Updated 389-ds-base packages fix CVE-2015-1854

Updated 389-ds-base packages fix security vulnerability: A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modification...

Scientific Linux Security Update : Important: 389-Ds-Base Security Update on SL7.x srpm/x86_64

A flaw was found in the way the Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. CVE-2015-1854 After...

Modern sky any order unauthorized modifications-vulnerability warning-the black bar safety net

I heard that modern sky sent the tickets, get to. Require the year tickets! Norman Jade on! Goddess! I'm coming! （Vulnerability demonstration using your own test account, the story is this, there once was a handsome than the and an ugly ratio. A handsome than buying a heavens laugh, the shipping...

CVE-2009-3022

Cross-site request forgery CSRF vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors...

Debian: Security Advisory (DSA-1413-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zope < 2.1.7 DocumentTemplate Unauthorized Modification

Binary data 1444.prm...

PT-2000-1130 · Debian +1 · Debian +2

Name of the Vulnerable Software and Affected Versions: gnucash affected versions not specified Description: The issue concerns the libguile.so library file used by gnucash, which is installed with world-writable permissions in Debian GNU/Linux. This could potentially allow unauthorized...