PT-2018-17261

Name of the Vulnerable Software and Affected Versions: Joomla! Smart Shoutbox version 3.0.0 Description: A SQL Injection issue exists in the Smart Shoutbox component for Joomla!, which can be exploited via the shoutauthor parameter to the "archive" API endpoint. Recommendations: For Joomla! Smart...

PT-2018-17574

Name of the Vulnerable Software and Affected Versions Netwave IP Camera devices affected versions not specified Description An issue allows an unauthenticated attacker to crash a device by sending a POST request with a large body size to the "/" API endpoint. Recommendations At the moment, there ...

CVE-2017-1000388

The CVE-2017-1000388 entry concerns the Jenkins Dependency Graph Viewer plugin (version 0.12 and earlier). The root cause is missing permission checks on the API endpoint that modifies the dependency graph, allowing any user with Overall/Read permission to modify the data. This description is sup...

CVE-2017-1000388: Missing Authorization

Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data...

PT-2017-15087

Name of the Vulnerable Software and Affected Versions FS Lynda Clone affected versions not specified Description The issue allows for CSRF via the "user/edit profile" API endpoint, as demonstrated by adding content to the user panel. Recommendations At the moment, there is no information about a...

PT-2017-14537

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions 6.1.1030.1 and prior Description A SQL Injection issue was discovered, which generates an error in the database log. This issue allows for potential information disclosure. Recommendations For versions 6.1.1030.1 and...

PT-2017-14902

Name of the Vulnerable Software and Affected Versions Co-work Space Search Script version 1.0 Description The issue is related to SQL Injection via the city parameter in the /list API endpoint. Recommendations For Co-work Space Search Script version 1.0, avoid using the city parameter in the /lis...

Open-Xchange: IDOR - setAttribute action of user object in API

Note. I selected sandbox.open-xchange.com as the asset in Hackerone but this was tested on a local installation . Hello, There appears to be a possible IDOR vulnerability in the following API endpoint for setting custom attributes:...

PT-2017-14035 · E Sic · E-Sic

Name of the Vulnerable Software and Affected Versions: E-Sic version 1.0 Description: An authentication bypass issue exists due to the acceptance of '=' or ' values for the username and password variables in the "/index" also known as "login" API endpoint. Recommendations: For E-Sic version 1.0, ...

Authorization

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check the current user's authentication and authorization when...

RubyGems: Request Hijacking Vulnerability in RubyGems 2.6.13 and earlier

We received this report via security@ from [email protected], I'm filing here for tracking and visibility purposes... "I was looking at commit 8d91516fb7037ecfb27622f605dc40245e0f8d32, which was the fix for the DNS hijacking issue CVE-2017-0902. The function still handles the DNS response in ...

opendata.gov.je XSS vulnerability

Vulnerable URL: https://opendata.gov.je/api/1/util/snippet/apiinfo.html?resourceid=a15ed8ba-93a8-4596-b6bb-945717c257bbrooturl=javascript:alert/OPENBUGBOUNTY/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2017-11629

dayrui FineCms through 5.0.10 has Cross Site Scripting XSS in controllers/api.php via the function parameter in a c=api&m=data2 request...

PT-2017-12065

Name of the Vulnerable Software and Affected Versions Geutebruck Gcore versions 1.3.8.42 and 1.4.2.37 Description The issue is a stack-based buffer overflow in GCoreServer.exe, allowing remote attackers to execute arbitrary code via a long URI in a GET request to the / API endpoint. Recommendatio...

WakaTime: Email Spoofing Via /api/v1/users/reset_password

Thanks @leet-boy! Thanks @alanhamlett and all the team of @WakaTime for fixing this and handling the report quickly and fairly!...

PT-2017-9391

Name of the Vulnerable Software and Affected Versions WEB SCHEDULE affected versions not specified Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the month parameter in the API endpoint. This could potentially lead to...

CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

ok.ru: Blind SQL Injection

@linkks reported a blind sql injection: POST /api/updateShareCount HTTP/1.1 Host: insideok.ru Cache-Control: no-cache Accept: application/json, text/javascript, /; q=0.01 Origin: http://insideok.ru Referer: http://insideok.ru/lica User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64; rv:50.0...

Cross-site scripting vulnerability in KingCMS 'conn.php' page

KingCMS is a content management system based on WEB technology. A cross-site scripting vulnerability exists in KingCMS. The /api/conn.php page fails to properly filter user input, allowing an attacker to exploit the vulnerability to build a malicious web page and trick users into parsing it to...

PT-2016-6199

Name of the Vulnerable Software and Affected Versions Fortinet FortiWan formerly AscernLink versions prior to 4.2.5 Description The issue allows remote authenticated users to obtain sensitive information. This can be achieved through accessing a backup of the device configuration via the...