Custom Field Suite <= 2.4 - Insufficient Authorisation

Any authenticated user is able to import and export Custom Field Suite config via AJAX...

XSRF - complete task request omits atl-token

Potential XSRF vulnerability in tasks. No atl-token is present in the request to complete a task which suggests an attacker may be able to craft a cross site request forgery and action a task without the correct authorisation...

Windows zero-day flaw bypasses UAC !

A new zero-day attack against Windows, capable of bypassing the User Access Control protections introduced in Windows Vista and designed to prevent malware from gaining administrative access without user authorisation, has been discovered in the wild. The proof-of-concept implementation of the...

Wayport Public Access PC Authentication Bypass Weakness

Application: Wayport Public Access PC Vendor: http://www.wayport.net Bug: Authorisation Bypass Risk: High Date: 8 April 2008 Author: Pascal Cretain e-mail: Pascal.Cretain at Gmail dot com List: BugTraq SecurityFocus ======= Product ======= Wayport's Public Access PC === Bug === There is an...

Debian Security Advisory DSA 634-1 (hylafax)

The remote host is missing an update to hylafax announced via advisory DSA 634-1. OpenVAS Vulnerability Test $Id: deb6341.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 634-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 766-1 [email protected] http://www.debian.org/security/ Martin Schulze July 26th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 766-1 [email protected] http://www.debian.org/security/ Martin Schulze July 26th, 2005 http://www.debian.org/security/faq -...

Portcullis Security Advisory 05-001

Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Lack of Backend Authorisation Checking Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application Details: Portcullis...