2622 matches found
Unauthorized Access Vulnerability in Massive Coworking System
Positive Collaboration Office System is an online office system designed and developed specifically for college offices. An unauthorized access vulnerability exists in CZF Coworking System, which can be exploited by attackers to obtain sensitive user information...
Unspecified Vulnerability in NiceHash Miner
NiceHash Miner is a mining software for Bitcoin. A security vulnerability exists in NiceHash Miner versions prior to 2.0.3.0. The vulnerability can be exploited by an attacker to obtain user information with a valid email address...
CVE-2019-18839
FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP file...
CVE-2019-3866
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...
CVE-2019-3866
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...
New Relic: [Bypass] Code injection to open redirect in https://insights.newrelic.com/accounts/2521182/dashboards/1026927
INTRODUCES: Overcoming mechanism of controlling url insertion, redirecting users to fake pages STEPS: Payload: Add dashboard note and insert code malicious. Code : Click link to view note detail : Impact Redirecting users to malicious pages, stealing user information such as fake scripts and user...
VMware VeloCloud 3.3.0 / 3.2.2 Authorization Bypass
COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: VeloCloud Vendor: VMware CVE ID: CVE-2019-5533 CSNC ID: CSNC-2019-007 Subject: Authorization Bypass Risk: Moderate Effect: Remotely exploitable CVSS v3.1 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Author:...
CyberArk Password Vault 10.6 - Authentication Bypass Vulnerability
Exploit for linux platform in category web applications Exploit Title: CyberArk Password Vault 10.6 - Authentication Bypass Author: Daniel Martinez Adan adon90 Vendor: https://www.cyberark.com Software:...
CVE-2018-11768
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage...
CVE-2018-11768
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage...
CVE-2018-11768
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage...
GiveWp < 2.5.5 - Authentication Bypass
The weakness allowed unauthenticated users to bypass API authentication methods and potentially access personally identifiable user information PII like names, addresses, IP addresses, and email addresses which should not be publicly accessible...
About the security content of iTunes 12.9.2 for Windows - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Logic Flaw Vulnerability in Original Shopping Network App
The original shopping network app is the original shopping network for mobile users free customized shopping software, there are product search, browse, collection, shopping cart, place an order, mobile payment and other functions, you can through the mobile platform, always view the latest...
About the security content of Safari 12.0.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
0xsp Mongoose v1.7 - Linux/Windows Privilege Escalation intelligent Enumeration Toolkit
Using 0xsp mongoose you will be able to scan targeted operating system for any possible way for privilege escalation attacks, starting from collecting information stage until reporting information through 0xsp Web Application API. user will be able to scan different Linux / windows Operation...
BlockDev Sp. Z o.o: Wordpress users disclosure on blog.makerdao.con
Wordpress users disclosure on blog.makerdao.con...
Vulnerability in Faster Wholesale System of Chengdu Renwei Technology Co.
Faster Horse New Wholesale System is a collection of professional B2B mall, fast ordering, lightweight sales and purchase inventory, CRM customer management, all-round aggregated payment, salesman patrols and performance appraisal, docking WMS intelligent warehousing and other functions in one...
Override Access Vulnerability in Niushop Mall System
Shanxi NiuKu Information Technology Co., Ltd. is a technical enterprise engaged in the development of mobile Internet-oriented. Niushop mall system has an override access vulnerability, which can be exploited by attackers to modify other users' information...