App Layering/Unidesk: If user logs in before Office activation script runs, Office licensing will break

When a user logs in and runs an Office component, they may immediately see "Please wait while setup configures microsoft office", which will run a repair function, which will fail. If they have Lync installed, then that Office component might run immediately without any interaction from them. Or...

openSUSE Security Update : gnome-shell (openSUSE-2017-974)

This update for gnome-shell provides the following fixes : - Fix not intuitive login screen for root user bsc1047262 - Disable session selection button when it's hidden in user switch dialog bsc1034584, bsc1034827 - Fix app windows overlay app list in overview screen bsc1008539 - Properly handle...

krrtx.org XSS vulnerability

Vulnerable URL: http://www.krrtx.org/user/login?refererPageID=60==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1826849 VIP website status:| No Check krrtx.org SSL connection:|...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-10601 Junos OS: Insufficient authentication for user login when a specific system configuration error occurs.

A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configuration precondition to occur. Typically...

crm.lingua-airlines.ru XSS vulnerability

Vulnerable URL: https://crm.lingua-airlines.ru/user/login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check crm.lingua-airlines....

Unidesk Recipe for NP Desktop Logon Time Optimization v3

One very popular use case for VDI is for kiosk or lab machines. Uses for these types of desktops include classroom labs, library access and general computing in schools and corporations. Architects and Administrators of these types of use cases generally want to be able to define default...

finecms the front Desk of any user login

No description provided by source...

Shining Flash cms Frontend Arbitrary User Login Vulnerability

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a front-end arbitrary user login vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, an attacker can use the vulnerability to bypass authentication t...

account.roomsketcher.com XSS vulnerability

Vulnerable URL: https://account.roomsketcher.com/user/lostpass/?ctxt=rsde=de=rs=https%3A%2F%2Faccount.roomsketcher.com%2Fuser%2Flogin%2F%3Fcaller%3Drs%26ctxt%3Drsde%26l%3Dde%26origUrl%3Dhttps%3A%2F%2Faccount.roomsketcher.com%2Fhome%2F=https%3A%2F%2Faccount.roomsketcher.com%2Fhome%2F Details:...

Slow Login Times and Intermittent Slowness in Session On PVS 7.6

Logon time very high for end users. Targets responding slowly in session. Users intermittently unable to login...

sharecafe.com.au XSS vulnerability

Open Bug Bounty ID: OBB-224198 Description| Value ---|--- Affected Website:| sharecafe.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Bypass $cfg['Servers'][$i]['AllowNoPassword']

PMASA-2017-8 Announcement-ID: PMASA-2017-8 Date: 2017-03-28 Updated: 2018-05-01 Summary Bypass $cfg'Servers'$i'AllowNoPassword' Description A vulnerability was discovered where the restrictions caused by $cfg'Servers'$i'AllowNoPassword' = false are bypassed under certain PHP versions. This can...

Code injection

The 1 Special:MyPage, 2 Special:MyTalk, 3 Special:MyContributions, 4 Special:MyUploads, and 5 Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted...

CVE-2015-8628

The 1 Special:MyPage, 2 Special:MyTalk, 3 Special:MyContributions, 4 Special:MyUploads, and 5 Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted...

CVE-2015-8628

The 1 Special:MyPage, 2 Special:MyTalk, 3 Special:MyContributions, 4 Special:MyUploads, and 5 Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted...

CVE-2015-8628

CVE-2015-8628 affects MediaWiki pages Special:MyPage, Special:MyTalk, Special:MyContributions, Special:MyUploads, and Special:AllMyUploads. Vulnerability allows remote attackers to obtain sensitive user login information via crafted links combined with page view statistics in MediaWiki releases p...

Departmental Store Management System 1.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Pasal - Departmental Store Management System v1.2 - SQL Injection Google Dork: N/A Date: 17.03.2017 Vendor Homepage: http://webstarslab.com Software : http://webstarslab.com/products/pasal-departmental-store-management-system/...

WatchGuard Fireware XTM < 11.12.1 Multiple Vulnerabilities

WatchGuard Fireware XMT Web UI is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

WordPress User Login Log 2.2.1 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in User Login Log WordPress Plugin ------------------------------------------------------------------------ Axel Koolhaas, July 2016...