Liferay Portal 7.0.4 - Server-Side Request Forgery

Liferay Portal 7.0.4 - Server-Side Request Forgery 1. ADVISORY INFORMATION ======================================== Title: Liferay Portal pingback.ping http://TARGET/ http://mehmetince.dev:8080/web/guest/home/-/blogs/30686...

Liferay Portal < 7.0.4 - Server-Side Request Forgery

ADVISORY INFORMATION ======================================== Title: Liferay Portal pingback.ping http://TARGET/ http://mehmetince.dev:8080/web/guest/home/-/blogs/30686...

Liferay Portal < 7.0.4 - Server-Side Request Forgery Vulnerability

Exploit for java platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: Liferay Portal pingback.ping http://TARGET/ http://mehmetince.dev:8080/web/guest/home/-/blogs/30686 0day.today 2018-06-26...

Debian DSA-4234-1 : lava-server - security update

Two vulnerabilities were discovered in LAVA, a continuous integration system for deploying operating systems for running tests, which could result in information disclosure of files readable by the lavaserver system user or the execution of arbitrary code via a XMLRPC call. C Tenable Network...

[SECURITY] [DSA 4234-1] lava-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4234-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 22, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4234-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: cobbler-2.8.3-2.fc28

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

[SECURITY] Fedora 27 Update: cobbler-2.8.3-2.fc27

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

thought.is Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628650 Description| Value ---|--- Affected Website:| thought.is Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

northeastern.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628569 Description| Value ---|--- Affected Website:| northeastern.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

tfetimes.com XSS vulnerability

Open Bug Bounty ID: OBB-628552 Description| Value ---|--- Affected Website:| tfetimes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

metro.co.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628544 Description| Value ---|--- Affected Website:| metro.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

bles.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628542 Description| Value ---|--- Affected Website:| bles.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

heavy.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628543 Description| Value ---|--- Affected Website:| heavy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| w Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

pressherald.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628541 Description| Value ---|--- Affected Website:| pressherald.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

lafayette.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628519 Description| Value ---|--- Affected Website:| lafayette.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

dassault-aviation.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628509 Description| Value ---|--- Affected Website:| dassault-aviation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

secondstreet.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628507 Description| Value ---|--- Affected Website:| secondstreet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

timeout.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628096 Description| Value ---|--- Affected Website:| timeout.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

ggmusicandaudio.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628089 Description| Value ---|--- Affected Website:| ggmusicandaudio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...