3736 matches found
SQL Injection Vulnerability in Five Fingers CMS v4.1.0
Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture . Five Fingers CMS v4.1.0 SQL injection vulnerability exists , the vulnerability stems from the failure to filter ca.php file in the groupname parameter , an attacker can use the...
ca.romwe.com XSS vulnerability
Open Bug Bounty ID: OBB-683420 Description| Value ---|--- Affected Website:| ca.romwe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...
Fedora Update for ca-certificates FEDORA-2018-ff58779d1b
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 29 Update: ca-certificates-2018.2.26-2.fc29
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
[SECURITY] Fedora 28 Update: ca-certificates-2018.2.26-1.0.fc28
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
ns.211.ca XSS vulnerability
Open Bug Bounty ID: OBB-680427 Description| Value ---|--- Affected Website:| ns.211.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
support.theoplayer.com XSS vulnerability
Open Bug Bounty ID: OBB-680358 Description| Value ---|--- Affected Website:| support.theoplayer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
probullstats.com XSS vulnerability
Open Bug Bounty ID: OBB-680202 Description| Value ---|--- Affected Website:| probullstats.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
[ASA-201809-4] strongswan: authentication bypass
Arch Linux Security Advisory ASA-201809-4 ========================================= Severity: High Date : 2018-09-24 CVE-ID : CVE-2018-16151 CVE-2018-16152 Package : strongswan Type : authentication bypass Remote : Yes Link : https://security.archlinux.org/AVG-769 Summary ======= The package...
ca-agentur.de XSS vulnerability
Open Bug Bounty ID: OBB-678414 Description| Value ---|--- Affected Website:| ca-agentur.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Hyperledger: Brute Force of fabric-ca server admin account
fabric-ca server - Default configuration maxenrollments value -1enable outside enrollment - Listening 0.0.0.0:7054easily discoved and can be reached - No limit to wrong password try Above conditions result in brute force to CA server admin account Impact Attack gain a high-level permissioned...
CA Release Automation NiMi 6.5 Remote Command Execution
Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release...
CA Release Automation NiMi 6.5 - Remote Command Execution Exploit
Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release Automation NiMi 5.X,...
CA Release Automation NiMi 6.5 - Remote Command Execution
Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release...
CA Release Automation NiMi 6.5 - Remote Command Execution
CA Release Automation NiMi 6.5 - Remote Command Execution Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link:...
Man-in-the-Middle (MitM)
postgresql is vulnerable to man-in-the-middle. Hostname verification for non-default SSL factories are not performed if the hostname verifier is not provided to the driver. This allows an attacker to masquerade as a trusted server by providing a certificate signed by a trusted CA...
CA Unified Infrastructure Management < 8.48 / 8.53 Multiple Vulnerabilities (CA20180829-02)
According to its self-reported version number from the CA Unified Infrastructure Management UIM application running on the remote host is prior to 8.48 or 8.53. It is, therefore, affected by multiple vulnerabilities : - A hardcoded secret key exists that could allow information disclosure...
CVE-2018-1000664
daneren2005 DSub for Subsonic Android client version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result in Any non-CA signed server certificate, including self signed and expired, are accepted by the client. This attack appear to be exploitable...
CA Unified Infrastructure Management Hardcoded Key Vulnerability
CA Unified Infrastructure Management is a powerful unified IT monitoring solution that helps organizations deliver reliable, flexible IT services. A hard-coded key vulnerability exists in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, which can be exploited by an attacker to access...