WordPress Active User plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Active User plugin versions = 1.0.1. Solution No patched version available...

Atlassian Fisheye and Crucible Information Disclosure Vulnerability (CNVD-2020-38890)

Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. An information disclosure vulnerability exists in /json/fe/activeUserFinder.do in Altassian Fisheye a...

How to View Active Users Sessions Connected to Specific Citrix Gateway vServers

This article helps you identify active user sessions connected to Citrix Gateway vServers. This solution will work on allCitrix Gateway firmware versions...

Unspecified vulnerability in SMA Solar Technology inverter

SMA Solar Technology inverter is a photovoltaic inverter device from SMA Germany. A security vulnerability exists in the SMA Solar Technology inverter. An attacker could exploit this vulnerability by sending specially crafted packets to the inverter to determine the active user account...

New Relic: All Active user sessions should be destroyed when user change his password!

hello security, There is an user sessions issue on your application that should be fixed. Proof of Concept Suppose, you have an account on newrelic.com Somehow an attacker manage to get your password and logged in your account.. after knowing that your ID has been compromised what you'll do ? i...

Microsoft Windows Environment Variables

Nessus was able to collect system and active account environment variables on the remote Windows host and generate a report as a CSV attachment. C Tenable, Inc. include"compat.inc"; if description scriptid92364; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability References: =========== View: http://www.youtube.com/watch?v=eIgb9D-0DWs Download: http://www.vulnerability-lab.com/resources/videos/222.wmv Release Date: ============= 2011-07-14 Vulnerability Laboratory I...

Privilege escalation

The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 formerly CRM-CTT does not properly verify user privileges, which allows remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass intended access restrictions and edit non-active user settings. NOT...

Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net

According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...

CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...

CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...