CVE-2019-12277

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname...

Design/Logic Flaw

The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript A...

CVE-2015-0297

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the 1 ServerInvokerServlet or 2 SchedulerService or 3 cause a denial of service disk consumption via the ContentManager...

PayPal Inc BB - API Restriction Auth Bypass Vulnerability

Document Title: =============== PayPal Inc BB - API Restriction Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1338 View: https://www.youtube.com/watch?v=RXubXPr2M4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=895 Release Date:...

PayPal Inc BB - API Restriction Auth Bypass Vulnerability

Document Title: =============== PayPal Inc BB - API Restriction Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1338 View: https://www.youtube.com/watch?v=RXubXPr2M4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=895 Release Date:...