Veeam ONE Reporter Cross-Site Request Forgery Vulnerability

Veeam ONE Reporter is part of the Veeam ONE integrated solution and includes detailed reports and dashboards for documentation, analytics, decision making, refunds, change tracking, capacity planning and resource utilization optimization. A cross-site request forgery vulnerability in Veeam ONE...

File Upload Vulnerability in SDCMSV1.8

Based on Php+MySql environment, it is developed to integrate computer website, mobile website and micro letter public number management system. SDCMSV1.8 has a file upload vulnerability that can be exploited by attackers to gain server privileges...

Bashter - Web Crawler, Scanner, And Analyzer Framework

Bashter is a tool for scanning a Web-based Application. Bashter is very suitable for doing Bug Bounty or Penentration Testing. It is designed like a framework so you can easily add a script for detect vulnerability. For Example You can add something script like this:...

Denial Of Service (DoS)

Microsoft .NET Framework is vulnerable to denial of serviceDoS attacks. A remote user could send specially crafted requests to the target .NET web application to trigger a request processing error in the Microsoft Common Object Runtime Library and cause denial of service conditions which leads...

Out-Of-Bounds Write

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Heap-Based Buffer Overflow

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Arbitrary Code Execution

firefox/thunderbird is vulnerable to arbitrary code execution. A flaw was found in the Alarm API, which could allow applications to schedule actions to be run in the future. A malicious web application could use this flaw to bypass the same-origin policy...

Information Disclosure

The modwsgi adapter is vulnerabel to information disclosure. The attack is possible because the function modwsgi leaks memory of a hosted web application via the "Content-Type" header, allowing an attacker to reveal limited portions of the web application's memory...

Denial Of Service (DoS)

ruby is vulnerable to denial of service. An attacker able to supply a large number of inputs to a Ruby application such as HTTP POST request parameters sent to a web application that are used as keys when inserting data into an array could trigger multiple hash function collisions, making array...

[SECURITY] Fedora 29 Update: php-horde-horde-5.2.21-1.fc29

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

[SECURITY] Fedora 28 Update: php-horde-horde-5.2.21-1.fc28

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

Fedora Update for php-horde-horde FEDORA-2019-a975e52e95

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 30 Update: php-horde-horde-5.2.21-1.fc30

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

CVE-2019-11621

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user or a user with permission to manage network configuration could exploit the vulnerability to obtain database sensitive...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure Exploit

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information, including, but...

CVE-2015-9284

The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Set_Task.cgi Permission Assignment

Talos Vulnerability Report TALOS-2018-0756 Sierra Wireless AirLink ES450 ACEManager EmbeddedAceSetTask.cgi Permission Assignment Vulnerability April 25, 2019 CVE Number CVE-2018-4072, CVE-2018-4073 Summary An exploitable Permission Assignment vulnerability exists in the ACEManager...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14591)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in BM Sterling B2...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14609)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14608)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...