261 matches found
Design/Logic Flaw
The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a...
Security Bulletin: Information Exposure vulnerability found on IBM Security Secret Server (CVE-2019-4634)
Summary This security bulletin describes plugging some potential, minor yet significant, information leaks by the IBM Security Secret Server Web server. IBM Security Secret Server may unintentionally disclose information about their underlying technologies through headers, error messages, version...
Command injection
In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list SEC-75...
CVE-2019-4293
IBM Storwize V7000 Unified 2073 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699...
CVE-2019-10243
CVE-2019-10243 affects Eclipse Kura up to v4.0.0. The issue is that Kura exposes the underlying Ui Web server version in its replies, which an attacker could use as a hint to craft targeted attacks against the Kura web server. The provided documents do not specify a fixed version or remediation; ...
RATELIMITED: Exposure of tinyMCE js source code with plugin version disclosure which can leads to exploit further attacks.
Hello Security Team Summary : When looking for links and trying for content discovery i found a link on domain support.theendlessweb.com https://support.theendlessweb.com/swift/apps/base/javascript/global/thirdparty/TinyMCE/tinymce.min.js It contains the tinyMCE plugin and the version they are...
The vulnerability of the FortiOS operating system, related to the storage of FortiOS versions in the FortiOS IKE package, allows attackers to disclose sensitive information that is protected by this system.
The vulnerability of the FortiOS operating system is related to the storage of FortiOS versions in the FortiOS IKE packages. Exploiting this vulnerability allows a malicious actor to disclose sensitive information about FortiOS versions by checking the VendorID in the FortiOS IKE packages...
Design/Logic Flaw
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
CVE-2018-15310
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
CVE-2018-15310
A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages...
CVE-2018-15310
CVE-2018-15310 affects BIG-IP APM portal access. Affected versions are 11.5.1–11.5.7, 11.6.0–11.6.3, and 12.1.0–12.1.3, which disclose the BIG-IP software version in rewritten portal pages. This is an information disclosure vulnerability in the portal access component; the root cause is not fully...
WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion
WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion Exploit Title: WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion Date: 2018-04-25 Exploit Author: Wadeek Software Link: https://downloads.wordpress.org/plugin/wp-with-spritz.zip Software Version: 1.0 Google Dork: intitle:"Sprit...
WordPress WP With Spritz 1.0 File Inclusion
Exploit Title: WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion Date: 2018-04-25 Exploit Author: Wadeek Software Link: https://downloads.wordpress.org/plugin/wp-with-spritz.zip Software Version: 1.0 Google Dork: intitle:"Spritz Login Success" AND...
WordPress WP with Spritz 1.0 Plugin - Remote File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion Exploit Author: Wadeek Software Link: https://downloads.wordpress.org/plugin/wp-with-spritz.zip Software Version: 1.0 Google Dork: intitle:"Spritz Login Success" AND...
WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion
Exploit Title: WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion Date: 2018-04-25 Exploit Author: Wadeek Software Link: https://downloads.wordpress.org/plugin/wp-with-spritz.zip Software Version: 1.0 Google Dork: intitle:"Spritz Login Success" AND...
CVE-2017-1126
IBM WebSphere Message Broker IBM Integration Bus 9.0 and 10.0 could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341...
CVE-2017-13990
An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of Apache Tomcat application server version...
Nextcloud: Banner Grabbing - Apache Server Version Disclousure
Hello Nextcloud, I'd like to report a nice little bug. Banner Grabbing is a technique used to gain information about a remote server. Additionally, this technique is use to get information about remote servers. I've captured the HTTP request while visiting https://customerupdates.nextcloud.com an...
Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2017-20964)
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...
