IBM WebSphere Cast Iron Information Disclosure Vulnerability

IBM WebSphere Cast Iron is a cloud-based software from IBM, USA. The software enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. A security vulnerability exists in IBM WebSphere Cast Iron. An attacker could exploit the vulnerability ...

CVE-2018-6151

Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension...

Design/Logic Flaw

IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868...

CVE-2013-2972

IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868...

CVE-2013-2972

Summary (CVE-2013-2972): IBM WebSphere Cast Iron 6.3 (Virtual and Physical appliances) has a vulnerability that could allow remote attackers to bypass intended access restrictions via unspecified vectors. The issue is documented in IBM’s security bulletin for Cast Iron, which cites a CVSS v2 base...

CVE-2013-2972

IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868...

CVE-2013-2972: Improper Access Control

IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868...

PT-2018-4079

Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron version 6.3 Description The issue allows remote attackers to bypass intended access restrictions. Recommendations For IBM WebSphere Cast Iron version 6.3, at the moment, there is no information about a newer version tha...

CVE-2018-1000617

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

Input validation

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

CVE-2018-1000617

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

CVE-2018-1000617

Atlassian Floodlight Controller versions 1.2 and earlier are affected by a Denial of Service in the Forwarding module due to an improper type cast. This remote, network-exploitable issue can cause thread crashes. The provided documents do not specify a remediation version or patch details.

CVE-2018-13488: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for Crypto Alley Shares CAST, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-1000617: Improper Input Validation

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

PT-2018-9471

Name of the Vulnerable Software and Affected Versions Atlassian Floodlight Controller versions 1.2 and earlier Description The issue is related to a Denial of Service vulnerability in the Forwarding module, which can result in an improper type cast. This allows remote attackers to cause a Denial ...

PT-2018-2342

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 61 Firefox ESR versions prior to 60.1 Firefox ESR versions prior to 52.9 Thunderbird versions prior to 60 Description The issue is related to the media stream recording mechanism in web browsers and email clients, whe...

Crypto Identifier - Tool To Uncipher Data Using Multiple Algorithms And Block Chaining Modes

Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionary. Supported Algorithms : AES ARC2 ARC4 Blowfish CAST DES DES3 XOR Supported modes : ECB CBC CFB OFB Usage: python...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Cast Iron

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10 FP15 used by WebSphere Cast Iron. These issues were disclosed as part of the IBM Java SDK updates in January and April 2018. Vulnerability Details CVEID: CVE-2018-2783 DESCRIPTION: An unspecified...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Cast Iron

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10 FP10 and Version 6 SR16 FP50 used by WebSphere Cast Iron. These issues were disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An...

Security Bulletin: GNU C library (glibc) and OpenSSL vulnerabilities affect WebSphere Cast Iron. (CVE-2015-7547 CVE-2015-3193 CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 CVE-2015-1794)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects WebSphere Cast Iron. OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by WebSphere Cast Iron. WebSphere Cast Iron has addressed the applicable CVEs...