as-golf-haut-poitou.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-884992 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting as-golf-haut-poitou.fr websit...

Citrix PDF Printer Not Auto Creating With Workspace app for Chrome OS

Customer having an issue with Workspace on the Chromebooks. The "Citrix PDF Printer" is not auto creating when logging into a Windows 10 desktop session. The "Auto-Create PDF Universal Printer" policy is set to enabled, but it's not creating the printer when logging into a session. Logging in fro...

CVE-2019-1033

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

CVE-2018-19999

The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability,...

Goodbye Passwords: Hello Identity Management

Keeping track of user names and passwords sounds easy, but it is not. In a world where protected network resources are accessed by employees on mobile devices, outside contractors, web applications and internet of things IoT devices – passwords just don’t cut it anymore. The stakes are high:...

UBUNTU-CVE-2019-12300

Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim...

Buildbot License Issue Vulnerability

Buildbot is a continuous integration tool for software development. The product is primarily used for automated building, testing and releasing of software. Buildbot versions prior to 1.8.2 and 2.x versions prior to 2.3.1 accept an authorization token submitted by a user from OAuth and use it to...

Feds Target $100M ‘GozNym’ Cybercrime Network

Law enforcement agencies in the United States and Europe today unsealed charges against 11 alleged members of the GozNym malware network, an international cybercriminal syndicate suspected of stealing $100 million from more than 41,000 victims with the help of a stealthy banking trojan by the sam...

Information Disclosure

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The OpenShift Container Platform 3.9 Release Notes provide information about new features, bug fixes, and known issues:...

wildfly: Race condition on PID file allows for termination of arbitrary processes by local users

A flaw was discovered in wildfly that would allow local users, who are able to execute init.d script, to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root...

Siemens AS-Interface Master Communications Adapter Detection

Binary data 750325.prm...

Siemens CM 1243-2 AS-i Master Communications Adapter Detection

Binary data 750155.prm...

Siemens CP 243-2 AS Interface Module Detection

Binary data 750078.prm...

Authorization Bypass

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The OpenShift Container Platform 3.6 Release Notes provide information about new features, bug fixes, and known issues:...

Cross-Site Scripting (XSS)

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...

Privilege Escalation

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...

Information Disclosure

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...

Information Disclosure

jboss-as is vulnerable to information disclosure. The vulnerability exists as it does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute...

Information Disclosure

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. Changes to the ceph component: In the previous version, launching of nova instances resulted in nova-compute...

Authorization Bypass

JBoss AS is vulnerable to authorization bypass. The isCallerInRole method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles...