geostjohns2019.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1051229 Security Researcher KhanJanny Helped patch 3054 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting geostjohns2019.ca websit...

CVE-2019-19231

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

Design/Logic Flaw

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

CVE-2019-19231 concerns a local privilege-escalation in Broadcom/CA Client Automation Agent for Windows (versions 14.0–14.3). The available documents confirm an insecure file access path as the root cause enabling a local attacker to gain elevated privileges. The details consistently reference th...

PT-2019-15787

Name of the Vulnerable Software and Affected Versions CA Client Automation versions 14.0 through 14.3 Description An insecure file access issue exists that can allow a local attacker to gain escalated privileges. Recommendations For CA Client Automation versions 14.0 through 14.3, at the moment,...

CVE-2019-19231: Windows Hard Link

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

Inspecting TLS Web Traffic - Part 2

In the first blog post I covered why HTTPS web traffic has grown to unprecedented levels, provided a TLS primer and looked at the basic concept of intercepting and inspecting HTTPS web traffic with Man-In-The-Middle techniques MITM. In the second part, I will dive a bit deeper into how the TLS MI...

Payment Logic Vulnerability in Cloud Industry CMS ca***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Payment logic vulnerability exists in the CMS ca.php file. Attackers can use this vulnerability to arbitrarily modify the size of the payment amount...

Broadcom CA Client Automation CVE-2019-19231 Local Privilege Escalation Vulnerability

Description Broadcom CA Client Automation is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary command with elevated privileges on the affected system. Broadcom CA Client Automation versions 14.0, 14.1, 14.2, 14.3 are vulnerable...

EulerOS 2.0 SP3 : openssl (EulerOS-SA-2019-2642)

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. Th...

Debian: Security Advisory (DSA-4585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in UQCMS Cloud Business System ca***.cl***.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system ca.cl.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

Broadcom CA Automic Sysload CVE-2019-19518 Arbitrary Command Execution Vulnerability

Description Broadcom CA Automic Sysload is prone to an arbitrary command-execution vulnerability. An attacker can exploit this issue to execute arbitrary system command on the affected system. This may aid in further attacks. CA Automic Sysload versions 5.6.0, 5.8.0, 5.8.1, 6.0.0, 6.0.1, 6.1.2 ar...

CVE-2019-19230

An unsafe deserialization vulnerability exists in CA Release Automation Nolio 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code...

Deserialization of untrusted data

An unsafe deserialization vulnerability exists in CA Release Automation Nolio 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code...

CVE-2019-19230

An unsafe deserialization vulnerability exists in CA Release Automation Nolio 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code...

CVE-2019-19230

CVE-2019-19230 affects CA Release Automation (Nolio) 6.6 – DataManagement component . It is an insecure/deserialization vulnerability that allows a remote attacker to execute arbitrary code. The issue is documented with a CRITICAL (CVSS v3.1 9.8) impact and a high-severity network-exposed vector....

PT-2019-15786

Name of the Vulnerable Software and Affected Versions CA Release Automation Nolio version 6.6 Description An issue exists due to unsafe deserialization in the DataManagement component, allowing a remote attacker to execute arbitrary code. Recommendations For CA Release Automation Nolio version 6....