2622 matches found
pentest-wiki
This repository is an information gathering library for penetration testers/researchers. It contains various tools and documentation for gathering information about a target organization, including IP analysis, whois analysis, and social media research. The library includes bookmarks for various...
CVE-2019-4288
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631...
CVE-2019-4286
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514...
Code injection
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631...
CVE-2019-4286
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514...
CVE-2019-7634
SUAP V2 allows XSS during the update of user information...
CVE-2019-7634
SUAP V2 allows XSS during the update of user information...
Information disclosure
SUAP V2 allows XSS during the update of user information...
CVE-2019-7634
CVE-2019-7634 affects the SUAP V2 web application, where a cross-site scripting (XSS) flaw occurs during the update of user information. Connected sources indicate the root cause as insufficient validation of client data, enabling injection of script in user-update flows. The NVD metrics show a n...
CVE-2019-7634
SUAP V2 allows XSS during the update of user information...
Security Bulletin: Android Backup is Allowed (CVE-2019-4288)
Summary IBM Maximo Anywhere allows Android Backup which could result in an attacker being able to copy application information from device. Vulnerability Details CVEID: CVE-2019-4288 DESCRIPTION: IBM Maximo Anywhere could disclose highly senstiive user information to an authenticated user with...
Security Bulletin: Sensitive Information Disclosed in Logs (CVE-2019-4286)
Summary IBM Maximo Anywhere discloses sensitive information such as usernames, passwords, session token and other cookies in device/console logs. Vulnerability Details CVEID: CVE-2019-4286 DESCRIPTION: IBM Maximo Anywhere could disclose highly senstiive user information to an authenticated user...
MediaWiki CentralAuth Information Disclosure Vulnerability
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. The product can be used to deploy in-house knowledge management and content management systems. centralAuth is one of the extensions that supports shared global...
Microsoft SharePoint Information Disclosure (CVE-2019-1443)
An information disclosure vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...
CVE-2019-12520
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the absolute URL of the request. If found, it servers the request. The absolute URL can include the decoded UserInfo...
About the security content of iCloud for Windows 7.16 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Zomato: [www.zomato.com] Blind SQL Injection in /php/geto2banner
Hi Team! Our team discovered a Blind SQL Injection by Abusing LocalParams resid in /php/geto2banner We are working to create a full PDF Report as an WriteUp ; Here is a Temporal Exploit based on the Vulnerable request: POST /php/geto2banner HTTP/1.1 Host: www.zomato.com Connection: close...
Authentication flaw
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentia...
Privilege escalation
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc...