Shopify: An administrator without any permission is able to get order notifications using his APNS Token.

Description ---- An administrator who lacks the 'Settings' permission is not able to add notifications through the UI. But the endpoint shop.myshopify.com/admin/mobiledevices.json does allow the unprivileged user to add his own device. PoC ---- This PoC simply show how to get & re-use the mobile...

SA-CONTRIB-2014-011 - Push Notifications - Information Disclosure

This module enables the delivery of push notifications to iOS and Android devices. The module doesn't sufficiently randomize the certificate filenames required for Apple's Push Notification service or protect the files from being publicly accessible, which could allow an attacker to acquire the...

Fedora 14 : NetworkManager-0.8.4-2.git20110622.fc14 (2011-8612)

This update fixes the security issue for creating shared WiFi networks. It's been tracked by 709662 - CVE-2011-2176. Before this update, NetworkManager didn't respect PolicyKit policies for creating shared WiFi networks: actions org.freedesktop.network-manager-settings.system.wifi.share.open and...