HP LaserJet P4014/P4015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P4014/P4015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

Unspecified Vulnerability Vulnerability in IBM Security Privileged Identity Manager

IBM Security Privileged Identity Manager ISPIM is an identity management product within the IBM Identity Governance and Management solution from IBM in the United States. The product is designed to protect, automate and audit the use of privileged identities to help defend against insider threats...

HP LaserJet 5200 HP LaserJet 5200 Authentication Bypass

Exploit Title : HP LaserJet 5200 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

Insecure Access Controls

Sonatype Nexus Repository Manager is use an insecure access controls. An unauthenticated user can craft requests in a way that can allow execution of arbitrary code and programs on the host system...

Multiple Intel Products Privilege License and Access Control Issues Vulnerabilities

Intel Server Board and so on are the products of the American Intel Intel company.Intel Server Board is a server motherboard.Intel Server System is a server array card.Intel Compute Module is a computing module. A vulnerability exists in a number of Intel products with privilege license and acces...

Intel Capability Licensing Service Elevation of Privilege Vulnerability

Intel Capability Licensing Service is an Intel Capability Licensing Service interface from Intel Corporation. A security vulnerability exists in Intel Capability Licensing Service versions prior to 1.50.638.1, which arises from the program's failure to enforce adequate access controls. A local...

Xen CVE-2019-17341 Privilege Escalation Vulnerability

Description Xen is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Xen Xen 2.0 Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1 Xen Xen 3.1.3 Xen Xen 3.1.4 Xen Xen 3.2 Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2...

Xen CVE-2019-17342 Privilege Escalation Vulnerability

Description Xen is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Technologies Affected Xen Xen 2.0 Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1 Xen Xen 3.1...

PHP 5.6.x < 5.6.35 Security Bypass Vulnerability

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.35. It is, therefore, affected by a security bypass vulnerability. Dumpable FPM child processes allow bypassing opcache access controls because fpmunix.c makes a PRSETDUMPABLE prctl call, allowing o...

WordPress WP-DreamworkGallery 2.3 CSRF / Shell Upload

Exploit Title : WordPress WP-DreamworkGallery Plugins 2.3 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/03/2019 Vendor Homepage : wordpress.org wpslideshow.com Software Download Link : downloads.wordpress.org/plugin/wp-dreamworkgallery.zip...

The vulnerability in the code of “psi/zdevice2.c” of the software for processing, transforming, and generating Ghostscript documents, related to setcolorspace errors, allows an intruder to circumvent the established access control measures.

The vulnerability in the code of “psi/zdevice2.c” of the software suite for processing, transforming, and generating Ghostscript documents is related to setcolorspace type errors. Exploiting this vulnerability can allow an attacker to bypass established access controls...

Moxa IKS, EDS (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: IKS, EDS Vulnerabilities: Classic Buffer Overflow, Cross-site Request Forgery, Cross-site Scripting, Improper Access Controls, Improper Restriction of Excessive Authentication...

WordPress NativeChurch Multi-Purpose 5.0.x File Download

Exploit Title : WordPress NativeChurch Multi-Purpose Themes 5.0.x Arbitrary File Download Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : themeforest.net Software Information Link :...

mod_jk: connector path traversal due to mishandled HTTP requests in httpd

The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was...

mod_jk: connector path traversal due to mishandled HTTP requests in httpd

The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was...

USN-3887-1: snapd vulnerability | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Chris Moberly discovered that snapd versions 2.28 through 2.37 incorrectly validated and parsed the remote socket address when performing access controls on its...

F3-CMS FatFreeFramework 0.0.1 Database Disclosure

Exploit Title : F3-CMS FatFreeFramework 0.0.1 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : f3cms.ca fatfreeframework.com Software Download Link : github.com/vijinho/f3-cms/archive/dev-master.zip Software...

ph7CMS Social Dating Community 14.8 Database Configuration Disclosure

Exploit Title : ph7CMS Social Dating Community 14.8 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : ph7cms.com Software Download Link : ph7cms.com/social-dating-features/...

Invo PhalconPHP 1.x Database Configuration Disclosure

Exploit Title : Unvo PhalconPHP 1.x Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phalconphp.com Software Download Link : github.com/phalcon/invo/archive/master.zip Software Information Link :...

Ispirithalaya Hospital Management System 0.1.2 Database Configuration Disclosure

Exploit Title : Ispirithalaya Hospital Management System 0.1.2 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : freeehospital.com Software Download Link :...