CVE-2018-18563: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 Serial...

CVE-2018-18565: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 Serial...

PT-2018-14923

Name of the Vulnerable Software and Affected Versions Google Monorail versions prior to 2018-05-04 Description The issue allows for a Cross-Site Search XS-Search due to CSV downloads being affected by CSRF. Additionally, calculations of download times for requests with an unsupported axis can be...

PT-2018-9680

Name of the Vulnerable Software and Affected Versions: Google Monorail versions prior to 2018-04-04 Description: The issue allows for Cross-Site Search XS-Search due to CSV downloads being affected by CSRF. Calculations of download times, particularly for requests with duplicated columns, can be...

PT-2018-14519

Name of the Vulnerable Software and Affected Versions Roche Accu-Chek Inform II Instrument versions before 03.06.00 Roche Accu-Chek Inform II Instrument versions 04.x before 04.03.00 CoaguChek Pro II versions before 04.03.00 CoaguChek XS Plus versions before 03.01.06 CoaguChek XS Pro versions...

PT-2018-14517

Name of the Vulnerable Software and Affected Versions Roche Accu-Chek Inform II Instrument versions prior to 03.06.00 Serial number below 14000 Roche Accu-Chek Inform II Instrument versions 04.x prior to 04.03.00 Serial Number above 14000 CoaguChek Pro II versions prior to 04.03.00 CoaguChek XS...

PT-2018-14924

Name of the Vulnerable Software and Affected Versions Google Monorail versions prior to 2018-06-07 Description The issue allows for Cross-Site Search XS-Search due to CSV downloads being affected by CSRF. Calculations of download times, specifically for requests with a crafted groupby value, can ...

New iPhone Passcode Bypass Found Hours After Apple Releases iOS 12.1

It's only been a few hours since Apple releases iOS 12.1 and an iPhone enthusiast has managed to find a passcode bypass hack, once again, that could allow anyone to see all contacts' private information on a locked iPhone. Jose Rodriguez, a Spanish security researcher, contacted The Hacker News a...

YouTuber reveals iPhone XS passcode bypass bug exposing contacts/photos

By Waqas With new iPhone XS out, it is a universally believed fact that Apple is committed to improving, and enhancing user privacy and security in its devices. With the new iOS 12 and iOS 12.1 beta, the Cupertino-based company claims to have taken security to a whole new level. However, this cla...

iPhone XS Passcode Bypass Hack Exposes Contacts, Photos

A passcode bypass vulnerability in Apple’s new iOS version 12 could allow an attacker to access photos and contacts including phone numbers and emails on a locked iPhone XS and other devices. The hack allows someone with physical access to a vulnerable iPhone to sidestep the passcode authorizatio...

Pangu Hackers have Jailbroken iOS 12 on Apple's New iPhone XS

Bad news for Apple. The Chinese hacking team Pangu is back and has once again surprised everyone with a jailbreak for iOS 12 running on the brand-new iPhone XS. Well, that was really fast. Pangu jailbreak team has been quiet for a while, since it last released the untethered jailbreak tool for iO...

Pangu Hackers have Jailbroken iOS 12 on Apple's New iPhone XS

Bad news for Apple. The Chinese hacking team Pangu is back and has once again surprised everyone with a jailbreak for iOS 12 running on the brand-new iPhone XS. Well, that was really fast. Pangu jailbreak team has been quiet for a while, since it last released the untethered jailbreak tool for iO...

phidgets.com XSS vulnerability

Open Bug Bounty ID: OBB-667609 Description| Value ---|--- Affected Website:| phidgets.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-2451

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

Session fixation

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

CVE-2018-2451

The CVE-2018-2451 issue concerns SAP HANA XS v1 (Extended Application Services) where a user’s CLI session may remain valid beyond revoked authorizations, allowing a platform user to access controller resources via an active session and an attacker with a session to misuse the token after closure...

CVE-2018-2451

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

CVE-2018-2451: Insufficient Session Expiration

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

PT-2018-15573

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services XS version 1 Description The XS Command-Line Interface CLI user sessions may have an unintentional prolonged period of validity, allowing a platform user to access controller resources via an active CLI...

addthis.com XSS vulnerability

Open Bug Bounty ID: OBB-633036 Description| Value ---|--- Affected Website:| addthis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...