Alienvault OSSIM/USM 4.x / 5.0 XSS / SQL Injection / Command Execution

Details ======= Product: Alienvault OSSIM/USM Vulnerability: Multiple Vulnerabilities XSS, SQLi, Command Execution Author: Peter Lapp, [email protected] CVE: None assigned Vulnerable Versions: Tested on 4.14, 4.15, and 5.0. It likely affects all previous versions as well. Fixed Version: No fix ha...

Modernize Confluence Backup & Restore

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-37322. panel As a User in all possible roles in order to save time & money and prevent unintended problems caused by the current...

Dropbox Acquisitions: Privilege Escalation at invite feature @hackpad.com

Hey! I would like to report Privilege Escalation @hackpad.com's Invite feature. Description : Hackpad allows admin of the workspace to add/invite users for admin/member/guest etc roles. I can able to grant that access to any one with just one click. Attack Scenario: Lets say you have workspace...

Privilege escalation

Microsoft System Center Virtual Machine Manager VMM 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machi...

KLA10454 PE vulnerabilities in MSCVMM

Improper user roles validating was found in MSCVMM. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed credentials. Original advisories MS bulletin CVE-2015-0012 Related products...

X (Formerly Twitter): Fabric.io - an app admin can delete team members from other user apps

It is possible for an app admin to delete all the team members from other apps for which he doesn't have access. To reproduce the attack, create two apps and add different user roles as below, VictimApp - Aliceadmin, Alicemember HackerApp - Hackeradmin, Hackermember Before proceeding with the...

SaaS Marketing platform Hubspot export vulnerability

Hubspot is a widely used SaaS marketing platform to email all your customers, collect data about them and attract new customers. It's is common practice to keep customer lists in Hubspot to send newsletters or other email communication. Hubspot has hardcoded roles that grant users access to vario...

Katello (Red Hat Satellite) users/update_roles Missing Authorization

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 Msf::Auxiliary include Msf::Exploit::Remote::HttpClient def initialize super 'Name' = 'Katello Red...

Respondly: Clickjacking - changing role

Hi, I'm able to frame the page, when I make a frame with a opacity of 0 and a button at the position of the role switch I can change the role without the victim knowing that. a POC screen : http://prntscr.com/3ay0mh a POC code : Best regards, Olivier Beg...

Katello (Red Hat Satellite) users/update_roles Missing Authorization

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Katello Red Hat Satellite users/updateroles Missing Authorization', 'Description' = %q This module exploits a missing authorization...

Users and Roles: Account Setup and Permissions

Documentation Review the following documentation for more information: Veeam Backup & Replication Console - Roles and Users Veeam Backup & Replication Console - Permissions Veeam Backup Enterprise Manager - Accounts, Roles, and Delegated Restore Permissions If this KB article did not resolve your...

Design/Logic Flaw

cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors...

CVE-2013-4404

CVE-2013-4404 affects cumin in Red Hat Enterprise MRG Grid 2.4, where user roles are not properly enforced. This allows remote authenticated users to bypass role restrictions and access privileged information or perform privileged operations via unspecified vectors (impact described as partial co...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update

An updated Grid component package that fixes multiple security issues is now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

SilverStripe Framework CMS 3.0.5 - Multiple Vulnerabilities

Document Title: =============== SilverStripe Framework CMS 3.0.5 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1084 Release Date: ============= 2013-09-22 Vulnerability Laboratory ID VL-ID: ===================================...

Regression - "Browse Project" permission for "Reporter" grants users to see projects they are not permitted to.

Regression of JRA-4935 When i add the "Reporter" to the "Browse Project" Permission of one project. This project instantly becomes visible to ALL usersvia the project table portlet, if they have any kind of permission to see this project or not. So all users can see this project, but can't see an...

PodHawk 1.85 - Arbitrary File Upload

PodHawk 1.85 - Arbitrary File Upload Exploit Title : PodHawk Arbitary File Upload Vulnerability Date : 23 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://podhawk.sourceforge.net Software Link :...

Design/Logic Flaw

app/models/spree/user.rb in spreeauthdevise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves...

CVE-2013-2506

app/models/spree/user.rb in spreeauthdevise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves...

Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege Escalation

Spree contains a flaw that leads to unauthorized privileges being gained. The issue is triggered as certain input related to mass role assignment in app/models/spree/user.rb is not properly verified before being used to update a user. This may allow a remote attacker to assign arbitrary roles and...