7247 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...
Immunity Canvas: EXIM_HEAP_OVERFLOW
Name| eximheapoverflow ---|--- CVE| CVE-2018-6789 Exploit Pack| CANVAS Description| eximheapoverflow Notes| CVE Name: CVE-2018-6789 VENDOR: Exim NOTES: There is a buffer overflow in the b64decode function, this bug exists since the first commit of exim, hence ALL versions are affected. This explo...
CVE-2012-0941
Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...
SimpleSAML php Access Restriction Bypass Vulnerability
SimpleSAMLphp is a program written in native PHP to handle authentication. An access restriction bypass vulnerability exists in SimpleSAMLphp before 1.15.2. The vulnerability arises because the sqlauth module in SimpleSAMLphp relies on the MySQL utf8 character set, which truncates queries when it...
Dovecot Memory Leak Vulnerability
Dovecot is an open source Linux/UNIX-based class of IMAP and POP3 mail server . auth client is one of the authentication client . A memory leak vulnerability exists in the auth client in Dovecot versions 2.0 through 2.2.33 and 2.3.0. An attacker can exploit this vulnerability to cause a denial of...
DEBIAN-CVE-2017-15132
A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to...
The vulnerability of the auth_password function in the sshd service of the OpenSSH security tool allows a hacker to induce a service failure.
The vulnerability of the authpassword function auth-passwd.c in the sshd service of the OpenSSH encryption protection tool exists due to insufficient input handling mechanisms lack of password length restrictions for authentication. Exploiting this vulnerability allows a malicious actor to cause ...
Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or from thin air.
Bugfixes Fixed a security issue discovered by @hernandev that enabled an attacker to impersonate any registered user in a Firebase application...
Web Reconnaissance Framework: Recon-ng
Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...
SA161: Local Information Disclosure Due to Meltdown and Spectre Attacks
SUMMARY Symantec Network Protection products, which run on an affected CPU chipset and execute arbitrary code from external sources, are susceptible to several information disclosure vulnerabilities aka Meltdown and Spectre attacks. A remote attacker, with the ability to execute arbitrary code...
Red Hat JBoss KeyCloak Denial of Service Vulnerability
Red Hat JBoss KeyCloak is the United States Red Hat Red Hat company's open source for modern applications and services in the authentication and access management software. A security vulnerability exists in Red Hat JBoss KeyCloak. A remote attacker can cause a denial of service resource...
Wickr Inc - Zero Day Vulnerability Research Report P1
Document Title: =============== Wickr Inc - Zero Day Vulnerability Research Report P1 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1994 Document: https://www.vulnerability-lab.com/resources/documents/56129965121925.rar Key: 3986592835691561956295629856195 Videos:...
Wickr Inc - Zero Day Vulnerability Research Report P1
Document Title: =============== Wickr Inc - Zero Day Vulnerability Research Report P1 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1994 Document: https://www.vulnerability-lab.com/resources/documents/56129965121925.rar Key: 3986592835691561956295629856195 Videos:...
WDMyCloud < 2.30.165 - Multiple Vulnerabilities
WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development...
django-saml2-auth (>=1.0.2 <=1.1.4), django-saml2-auth-custom (>=1.0.0 <=1.0.4) +4 more potentially affected by CVE-2017-1000433 via pysaml2 (>=4.0.2 <=4.4.0)
pysaml2 PYPI version =4.0.2, =1.0.2, =1.0.0, =12.0.2, =0.6.1, =3.4.8 Source cves: CVE-2017-1000433 Source advisory: OSV:PYSEC-2018-48...
CVE-2014-3651
Affected product: JBoss KeyCloak before 1.0.3.Final. Vulnerability: remote attackers can cause denial of service by sending a large value in the size parameter to auth/qrcode, related to QR code generation (resource consumption). Root cause: excessive resource usage leading to DoS. Impact: availa...
CVE-2017-15700
A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials...
The vulnerability of the BIGIPAuthCookie service in the iControl REST interface of the BIG-IP product line allows a attacker to gain access to the interface.
The vulnerability of the BIGIPAuthCookie service in the iControl REST interface of the BIG-IP product line is related to an incorrect session expiration time. Exploiting this vulnerability allows a malicious actor to gain access to the iControl REST interface by converting outdated cookie files...
Fedora 25 : mrbs (2017-b5bcfedf10)
Changes since MRBS 1.6.1 : - Fixed a number of security issues in MRBS that were disclosed to the project by SySS GmbH, including XSS, CSRF protection and session fixation. - Improved behaviour of browser caching in MRBS. - Improved localisation, especially the use of colons in labels. - Added ne...
SQL Injection Vulnerability in ThinkLC Classifieds auth.php Page
ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the auth.php page of the ThinkLC Classified Information System. The vulnerability is caused due to the system failing to effectively filter...