1090 matches found
DEBIAN-CVE-2012-0046
mediawiki allows deleted text to be exposed...
CVE-2012-0046
mediawiki allows deleted text to be exposed...
CVE-2012-0046
mediawiki allows deleted text to be exposed...
Code injection
mediawiki allows deleted text to be exposed...
CVE-2012-0046
mediawiki allows deleted text to be exposed...
CVE-2012-0046
mediawiki allows deleted text to be exposed...
UBUNTU-CVE-2019-11757
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...
"Can I Take Over XYZ?" - A List Of Services And How To Claim (Sub)Domains With Dangling DNS Records
What is asubdomain takeover? Subdomain takeover vulnerabilities occur when a subdomain subdomain.example.com is pointing to a service e.g. GitHub pages, Heroku, etc. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page ...
The vulnerability of the vCloud Director platform, related to improper session management, allows a attacker to intercept deleted sessions.
The vulnerability of the vCloud Director platform vCD is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept disconnected sessions remotely...
Malicious Package
Overview Version 0.0.3 of angluar-cli contains malicious code as a postinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed the package attempts to remove files and stop processes related to McAfee...
Cryptanalysis of SIMON-32/64
A weird paper was posted on the Cryptology ePrint Archive working link is via the Wayback Machine, claiming an attack against the NSA-designed cipher SIMON. You can read some commentary about it here. Basically, the authors claimed an attack so devastating that they would only publish a...
openstack-cinder: Data retained after deletion of a ScaleIO volume
An information-leak flaw was found in openstack-cinder deployments using the third-party EMC ScaleIO backend. It was possible for new volumes to contain previous data if they were created from storage pools which had disabled zero-padding. An attacker could exploit this flaw to obtain sensitive...
Atlassian Confluence < 6.13.1 Information Disclosure Vulnerability
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.1. It is therefore, affected by an information disclosure vulnerability which exists in the 'Word Export' component. An authenticated, remote attacker can exploit this...
The vulnerability of the memslot_get_virt function in the rendering system for deleted virtual workstations in SPICE allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the memslotgetvirt function in the SPICE rendering system’s “deleted virtual working area” component is related to the possibility of reading values beyond the allowed range due to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service...
jenkins: deleting a user record will does not invalidate existing sessions
An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilter2.java that allows attackers to extend the duration of active HTTP sessions indefinitely even though the user account may have...
Downloads Resources over HTTP in grunt-ccompiler
Affected versions of grunt-ccompiler insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
U.S. Dept Of Defense: █████████ - Insecure download cookie generation allows bypass of CAC authentication, access to deleted and locked files
Summary: To download a file, ████ directs users to /██████████/Download.aspx and sets a cookie authenticating the download. The cookie looks like this: pickup=Subject=&PackageID=MTU4NDgzMTU=███ If an attacker can generate this cookie, this allows downloading a file. As it turns out, the generatio...
MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF Date: 7/17/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=957 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2018-14575 1. Description: Creates a...