Kony Enterprise Mobile Management Security Bypass Vulnerability

Kony Enterprise Mobile Management is a mobile application solution. A security bypass vulnerability exists in Kony Enterprise Mobile Management EMM prior to 4.2.5.2 that has the ability to disclose a private key in clear text when changing requested parameters, allowing an attacker to exploit the...

CVE-2017-5672

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

CVE-2017-5672

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

CVE-2017-5672

Kony EMM (Enterprise Mobile Management) prior to 4.2.5.2 contains a private RSA key disclosure vulnerability triggered by manipulating request parameters. The issue affects Kony EMM 4.2.0 and likely older versions, where a logged-in user can cause the server to return the private key used to decr...

CVE-2017-5672: Exposure of Sensitive Information to an Unauthorized Actor

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

PT-2017-16662

Name of the Vulnerable Software and Affected Versions Kony Enterprise Mobile Management EMM versions prior to 4.2.5.2 Description The issue concerns the disclosure of a private key in clear-text when modifying request parameters. Recommendations For versions prior to 4.2.5.2, update to version...

SenNet Data Logger / Electricity Meter Code Execution

SenNet Data Logger appliances and Electricity Meters Multiple Vulnerabilities Note: Vendor has released the fix. Details to be documented in ICS-CERT Advisory. About SenNet is a trademark of Satel Spain that offers monitoring and remote-control solutions for businesses. Our engineers develop,...

Cookie Without Secure Flag Detected

When the secure flag is set on a cookie, the browser will prevent it from being sent over a clear text channel HTTP and only allow it to be sent when an encrypted channel is used HTTPS. The scanner discovered that a cookie was set by the server without the secure flag being set. Although the...

PT-2017-16771

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.6.0 and earlier Description The issue allows local guest OS users to cause a denial of service via a crafted VIRGL CCMD CLEAR command, resulting in a NULL pointer dereference. This occurs due to a problem in the util...

Wireless IP Camera (P2P) WIFICAM 'Cloud' Feature Design Flaw Vulnerability

Wireless IP Camera P2P WIFICAM is a wireless IP camera. A design flaw exists in the Wireless IP Camera P2P WIFICAM 'Cloud' feature, where the camera provides a 'Cloud' feature that is enabled by default, allowing consumers to bypass NAT and firewalls by managing the device over the network using ...

Code injection

Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...

CVE-2016-8233

Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...

CVE-2016-8233: Insertion of Sensitive Information into Log File

Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...

PT-2017-9548

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Administrator versions prior to 1.2.2 Description The issue concerns log files that may contain user credentials in clear text, potentially allowing a non-privileged user to view them. Recommendations For versions prior to 1.2....

IBM WebSphere MQ Man-in-the-Middle Hijacking Vulnerability

IBM WebSphere MQ is a messaging middleware product from IBM, USA. IBM WebSphere MQ sends cryptographic data in clear text over the network, allowing remote attackers to exploit the vulnerability to sniff the network for sensitive information...

Apple WebKit 10.0.2 - FrameLoader::clear Universal Cross-Site Scripting Exploit

Exploit for multiple platform in category web applications domWindow; mframe.document-domWindow-resetUnlessSuspendedForDocumentSuspension; mframe.script.clearWindowShellnewDocument-domWindow, mframe.document-pageCacheState == Document::AboutToEnterPageCache; / Apple WebKit: UXSS via...

Apple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting

domWindow; mframe.document-domWindow-resetUnlessSuspendedForDocumentSuspension; mframe.script.clearWindowShellnewDocument-domWindow, mframe.document-pageCacheState == Document::AboutToEnterPageCache; / Apple WebKit: UXSS via FrameLoader::clear When the new page is loading, FrameLoader::clear is...

Apple WebKit 10.0.2 - FrameLoader::clear Universal Cross-Site Scripting

Apple WebKit 10.0.2 - FrameLoader::clear Universal Cross-Site Scripting domWindow; mframe.document-domWindow-resetUnlessSuspendedForDocumentSuspension; mframe.script.clearWindowShellnewDocument-domWindow, mframe.document-pageCacheState == Document::AboutToEnterPageCache; / Apple WebKit: UXSS via...

Apple WebKit: UXSS via FrameLoader::clear (CVE-2017-2363)

When the new page is loading, FrameLoader::clear is called to clear the old document and window. Here's a snippet of FrameLoader::clear. void FrameLoader::clearDocument newDocument, bool clearWindowProperties, bool clearScriptObjects, bool clearFrameView ... // Do this after detaching the documen...

Design/Logic Flaw

Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data could be intercepted using man in the middle techniques...