Catalyst Mahara Duplicate Session Header Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara versions 15.04 prior to 15.04.7 and 15.10 prior to 15.10.3 using PHP version 5.3. An attacker could...

KRACK Detector - Detect and prevent KRACK attacks in your network

KRACK Detector is a Python script to detect possible KRACK attacks against client devices on your network. The script is meant to be run on the Access Point rather than the client devices. It listens on the Wi-Fi interface and waits for duplicate message 3 of the 4-way handshake. It then...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4003. Reason: This candidate is a reservation duplicate of CVE-2016-4003. Notes: All CVE users should reference CVE-2016-4003 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-0759

CVE-2016-4003 is an Apache Struts cross-site scripting vulnerability in the URLDecoder implementation that can be exploited remotely via a crafted URL to run script in a victim’s browser. Multiple connected documents reference this CVE and indicate that affected products (e.g., IBM Sterling Order...

GHSA-9959-C6Q6-6QP3 Moderate severity vulnerability that affects validator

Withdrawn: Duplicate of GHSA-79mx-88w7-8f7q...

GHSA-FMR4-7G9Q-7HC7 Moderate severity vulnerability that affects handlebars

Withdrawn: Duplicate of GHSA-9prh-257w-9277...

Inflection: Limited Account Takeover via Backup codes

Researcher submitted a duplicate of a previously-submitted report and requested public disclosure of this report...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6355. Reason: This candidate is a duplicate of CVE-2014-6355. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-6355 instead of this candidate. All references and descriptions in this...

Inflection: Amount Manipulation Buy Unlimited Credits in just $1.00

Researcher filed a duplicate report of an issue that had already been identified by another researcher and then requested public disclosure when we closed this as a duplicate...

Inflection: HTTP Host Header Injection on app.goodhire.com

Researcher reported an issue that was previously reported by a different researcher and subsequently removed from program scope and then requested that we publicly disclose the report after closing it as a duplicate...

Inflection: Host Header Injection and Cache Poisoning

Researcher submitted a report duplicating an issue that had already been reported to us, and then requested that we disclose this report publicly. So here we are...

Inflection: Goodhire Open Redirect

Researcher reported a duplicate issue...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 3 (VA MN: 7.0.2-510, VA Agent: 7.0.2-258)

This hotfix for Virtuozzo Automator 7.0.2 provides new features as well as stability and usability bug fixes. Vulnerability id: PVA-34527 Alert reason would not be shown on clicking the alert icon on the virtual environment or hardware node summary page if the corresponding event had already been...

CVE-2017-15083

CVE-2017-15083 is a reservation/duplicate of CVE-2009-1642. The connected records describe Mini‑stream ASX to MP3 Converter 3.0.0.7 as vulnerable to multiple stack-based buffer overflows enabling remote code execution via crafted inputs (e.g., a long RTSP URL in a .ram file or a long string in th...

Razer US: Reflected XSS on the https://deals.razerzone.com/json/translation endpoint

Thanks to SP1D3RS for the great report and working with the team on this one. This was a trivial POST-XSS, caused by using text/html Content-Type on the JSON endpoint, and ability to control the part of the response using unsanitized input. Why I disclosed it if this is a trivial issue? I pretty...

CVE-2017-5716

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12865. Reason: This candidate is a reservation duplicate of CVE-2017-12865. Notes: All CVE users should reference CVE-2017-12865 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2017-5716

Summary: ConnMan contains a stack-based buffer overflow in the DNS proxy (dnsproxy.c) that can be exploited by crafted DNS responses to cause a denial of service or remote code execution. This vulnerability has CVEs linked to CVE-2017-12865 and CVE-2017-5716, with public advisories noting remote ...

Legal Robot: Error the message with already e-mail

Hi team .. I found bug on your site i register with already e-mail your site show me this message please verify your e-mail click to resend verification email please fixed it soon change the message to this e-mail already sign up with other user .. PoC .. screenshow...

Excluding already redirected folders with UPM

Customers environment has Windows Settings\Folder Redirection setup for Documents or other folders. If UPM is also in use, the redirected folder might get a duplicate copy after UPM processes the logon. This is by design and expected...

UBUNTU-CVE-2017-13753

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9396. Reason: This candidate is a duplicate of CVE-2016-9396. Notes: All CVE users should reference CVE-2016-9396 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...