PT-2026-27267

Name of the Vulnerable Software and Affected Versions User Registration & Membership plugin for WordPress versions 5.0.1 through 5.1.4 Description The plugin has a flaw allowing unauthorized data modification. This is due to an insufficient capability check on the Content Access Rules REST API...

Barracuda ADC 5.x - Filter Bypass & Persistent Vulnerability

Document Title: =============== Barracuda ADC 5.x - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1423 Release Date: ============= 2018-07-08 Vulnerability Laboratory ID VL-ID: ==================================...

Microsoft ISA Server 2000站点和内容规则绕过漏洞

Microsoft Internet Security和Acceleration Server 2000是一款微软开发的防火墙和代理服务器程序。 Microsoft ISA Server的站点和内容访问规则实现存在问题，远程攻击者可以利用这个漏洞绕过这些规则，访问限制资源。 如果在请求的域名增加点'.'字符，可绕过代理服务器的过滤器，访问管理员规定的限制的资源和内容。如站点和内容规则设置对www.example.com进行拒绝访问，但是用户可以通过如下格式访问目标地址： www.example.com. Microsoft ISA Server 2000 Microsoft ISA...