PT-2015-3521

Name of the Vulnerable Software and Affected Versions Simple PHP Agenda versions 2.2.8 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through requests to several API endpoints, including...

NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

PT-2011-3664

Name of the Vulnerable Software and Affected Versions GNOME NetworkManager versions prior to 0.8.6 Description The issue allows local users to bypass intended wireless network sharing restrictions. This is due to the improper enforcement of the auth admin element in PolicyKit. Recommendations For...

Online Password Manager 4.1 - Insecure Cookie Handling

Online Password Manager v4.1 Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact: [email protected] N0T: Herkes Hecker Olmus :S yav siktir...

Online Password Manager 4.1 - Insecure Cookie Handling

Online Password Manager 4.1 - Insecure Cookie Handling Online Password Manager v4.1 Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact:...

CVE-2001-1343

CVE-2001-1343 affects WebStore 400/400CS 4.14 via ws_mail.cgi. The vulnerability allows remote authenticated WebStore administrators to execute arbitrary code by supplying shell metacharacters in the kill parameter. The CVSS metrics indicate network access with low attack complexity and no authen...