PHP Scripts Mall Advance Peer to Peer MLM Script Access Control Error Vulnerability

PHP Scripts Mall Advance Peer to Peer MLM Script is an online MLM Multi-Level Marketing system from PHP Scripts Mall India.Admin Panel is one of the admin panels. An access control error vulnerability exists in PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0 in the Admin Panel, whi...

Ninja Forms <= 3.3.21 - XSS and SQLi

Reflected XSS vulnerability in the administrative dashboard. Blind SQL injection vulnerability in the search filter on the submissions page...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0120

An update of 'systemd', 'python3', 'kubernetes-dashboard' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-0120

Updates of 'python3', 'kubernetes-dashboard' packages of Photon OS have been released...

Authentication Bypass

github.com/kubernetes/dashboard is vulnerable to authentication bypass. The vulnerability allows unauthorized users to bypass authentication and gain access to the dashboard's exclusive as the Dashboard's Service Account to retrieve confidential information...

CVE-2018-18264: Kubernetes Dashboard TLS Certificate Leak | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions Cloud Foundry Container Runtime CFCR All versions prior to 0.26.0 Description Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard’s Service Account for reading...

Kubernetes Dashboard < 1.10.1 Authentication Bypass Vulnerability

Kubernetes Dashboard is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Moderate: Red Hat Security Advisory: grafana security and bug fix update

The updated grafana package is now available for Red Hat Ceph Storage 3.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

grafana: XSS vulnerability via the "Dashboard > Text Panel" screen

A flaw was found in grafana. An incomplete fix for CVE-2018-12099 allows for a XSS in the "Dashboard Text Panel" screen...

CVE-2018-18264

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster...

Authentication flaw

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster...

CVE-2018-18264

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster...

CVE-2018-18264

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster...

CVE-2018-18264

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster...

CVE-2018-18264

CVE-2018-18264 : Kubernetes Dashboard versions prior to 1.10.1 are vulnerable to an authentication bypass that allows an attacker to use the Dashboard’s Service Account to read secrets in the cluster. This weakness is documented in multiple sources (NVD, Nuclei template, OSSV, etc.). Affected pro...

Kubernetes Dashboard Authentication Bypass Vulnerability

Google Kubernetes is an open source Docker container cluster management system from Google, Inc. The system provides resource scheduling , deployment and operation , service discovery and scaling up and down for containerized applications.Kubernetes Dashboard is a Web-based common interface for...

Cross site request forgery (csrf)

UWA 2.3.11 allows index.php?g=admin&c=admin&a=addadmindo CSRF...

Code injection

Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=$PATH$APACHERUNDIR$APACHERUNUSER parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet...

UBUNTU-CVE-2018-18249

Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=$PATH$APACHERUNDIR$APACHERUNUSER parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet...

Zomato: [www.zomato.com] Blind XSS in one of the admin dashboard

Summary: Admin dasboard ████ from user has XSS Vul Steps To Reproduce: 1. Login ██████ 1. Go to ███ function and intercept request Post data: "/zomato.php?c=zomatoxss" / POST ████ HTTP/1.1 X-Zomato-App-Version-Code: 5610001 ██████████ ███████ X-Zomato-API-Key: ███████ X-App-Language:...