Important: Red Hat Security Advisory: rhvm-setup-plugins security update

An update for rhvm-setup-plugins is now available for Red Hat Virtualization Engine 4.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2016-9568

A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform unauthorized actions...

CVE-2016-9568

A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform unauthorized actions...

CVE-2016-9568

Technical details for CVE-2016-9568 are not publicly available in the provided documents. Monitor for updates from other sources to assess impact, affected components, and remediation.

Uber: Design Issue at riders.uber.com/profile

Summary Hello, This is not actually a security threat but a design issue. When a user logs into rush.uber.com, he will get an option called Account Information, when clicked on it takes the user to page https://riders.uber.com/trips where user can edit his profile information. Here user can...

Legal Robot: design issue exists on login page

legalrobot allows an user to set email as password only by resetting password either by logged in and changing it into profile password changed succesfully but the user couldn't log in to the app.legalrobot.com because js checks with email and password and it states it couldn't be same also not...

Legal Robot: Profile shows incorrect account creation date

Hi Team, I get to know that you are using showing joined time. it's contain design issue. I think that you show for once user login in to their account and it should show from howmany minutes that user logged in? but i can see here a design issue, is that whenever we refresh page...

Microsoft Extends Edge Bug Bounty Program Indefinitely

Microsoft said Wednesday it would no longer impose a time limit for its Edge bug bounty program. The Redmond, Wash. based company announced the Edge on Windows Insider Preview WIP program in August 2016 as a means to incentivize researchers to find and report vulnerabilities in the browser...

Mixmax: Design issue with webhook (several) notifications on mixmax.com

Hi team, I noticed a design problem involving successive notifications about an incorrect webhook set at https://app.mixmax.com/dashboard/settings/rules I set an incorrect webhook for testing on this page and in a few hours I received more than 10 notifications. This can cause a certain...

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258 MsMpEng's JS engine uses garbage collection to manage the lifetime of Javascript objects. During mark and sweep the GC roots the vectors representing the JS stack as well as a few other hardcoded objects, traversing reachable...

Design/Logic Flaw

DISPUTED The crtknzrparsergb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact v...

Gratipay: URL Given leading to end users ending up in malicious sites

Hi, I found a design issue in the profile statement for the registered user. This is dependant on the end user however. In the profile statement, one can write something as well giving links is allowed. This, I think is by design. However, let us suppose the authenticated user creates a website o...

Pushwoosh: htaccess file is accesible

Design Issue, Information Disclosure, Low Severity. Non-critical , a little information disclosure...

Pushwoosh: Spoof Email with Hyperlink Injection via Invites functionality

Email Spoofing via hyperlink injection. Design Issue, Missing Best Practice, Low severity...

HackerOne: HackerOne Integrations Design Issue

Summary HackerOne Integrations Design Issue Description Include Impact This bug is similar to 170552. The HackerOne Integrations feature is very sensitive and can not be used with just a click, IMHO, or we can say "HackerOne users are a click away from​ giving to an attacker very sensitive...

Nextcloud: Content (Text) Injection at NextCloud Server 9.0.52 - via http://custom_nextcloud_url/remote.php/dav/files/

Dear Next Cloud Security Team, I would like to report an issue. This is not a critical issue since the affect and not even "touch" something sensitive that stored at the server via the application. As a summary, this is issue need the user interaction for exploiting the "target". So, based on thi...

Zomato: Instagram OAuth2 Implementation Leaks Access Token; Allows for Cross-Site Script Inclusion (XSSI)

Once a user connects his Zomato account to Instagram via OAuth2, the page https://www.zomato.com/php/instagramtagrelay leaks the Instagram OAuth2 Access Token issued to Zomato: PoC: https://www.zomato.com/php/instagramtagrelay?callback=aaabc Result personal data x'ed: HTTP/1.1 200 OK...

Concrete CMS: Unsafe usage of Host HTTP header in Concrete5 version 5.7.3.1

Concrete5 is affected by a design issue related to the Host HTTP header. Such header is being used to define the base URL for the application. Since the Host header can be arbitrarily manipulated by an attacker, this can have some security impacts...

shopex 接口设计问题导致某一类用户名密码重置

简要描述： shopex 接口设计问题导致某一类用户名密码重置 详细说明： 看到 shopex 有一个云登录机制，看代码: // 云登陆回调地址 function ecopenloginverify // 签名验证 $token = $this-system-getConf'certificate.token'; $GET'sign' && $this-getcesign$GET, $token == $GET'sign' || exit"签名错误，云登陆无法完成"; // 为登陆者创建账户 $accountMdl =...

Apple iOS v8.x - Message Context & Privacy Vulnerability

Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1346 Video: http://www.vulnerability-lab.com/getcontent.php?id=1350 Release Date: ============= 2014-12-16...