72 matches found
CVE-2019-3878
A vulnerability was found in modauthmellon before v0.14.2. If Apache is configured as a reverse proxy and modauthmellon is configured to only let through authenticated users with the require valid-user directive, adding special HTTP headers that are normally used to start the special SAML ECP...
CVE-2019-3878
The CVE-2019-3878 issue affects mod_auth_mellon for Apache before v0.14.2. When Apache runs as a reverse proxy and mod_auth_mellon is set to require valid-user, an attacker can bypass authentication by sending specific HTTP headers used in SAML ECP (non-browser) flows. The connected advisories in...
CVE-2019-3878
A vulnerability was found in modauthmellon before v0.14.2. If Apache is configured as a reverse proxy and modauthmellon is configured to only let through authenticated users with the require valid-user directive, adding special HTTP headers that are normally used to start the special SAML ECP...
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4414-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst March 23, 2019 https://www.debian.org/security/faq -...
Vulnerable domain identification
Identifying potentially vulnerable Exchange endpoints //usr/bin/env go run "$0" "$@"; exit "$?" package main import "metasploit/module" "msmail" "net" "strings" func main metadata := &module.Metadata Name: "Vulnerable domain identification", Description: "Identifying potentially vulnerable Exchan...
Honeywell Mobile Computers with Android Operating Systems
1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely Vendor: Honeywell Equipment: Mobile Computers Vulnerability: Improper Privilege Management 2. RISK EVALUATION A vulnerability in a system service on CT60, CN80, CT40, CK75, CN75, CT50, D75e, CN51, and EDA series mobile computers...
Integer overflow
The mintToken function of a smart contract implementation for Ethereum Cash Pro ECP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
ecp-sa.fr XSS vulnerability
Open Bug Bounty ID: OBB-456707 Description| Value ---|--- Affected Website:| ecp-sa.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
DUO-PSA-2014-006: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2014-006 Publication Date: 2014-10-09 Revision Date: 2014-10-16 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in which it may be possible for users to perform certain actions without completing...
DUO-PSA-2014-006: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2014-006 Publication Date: 2014-10-09 Revision Date: 2014-10-16 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in which it may be possible for users to perform certain actions without completing...
Enomaly ECP / Enomalism < 2.2.1 - Multiple Local Vulnerabilities
No description provided by source. Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in...
Election commission & Society of aircraft engineers of pakistan Hacked By Imm0rt4l5
Election commission & Society of aircraft engineers of pakistan Hacked By Imm0rt4l5 Hacked Url : https://www.ecp.gov.pk/viewpressreleasenotific.aspx?id=1374&typeid=2 Mirror : Hacked Url : Mirror :...
Easy-Clanpage 2.1 - SQL Injection
Easy-Clanpage 2.1 - SQL Injection /----------------------------Information------------------------------------------------ +Name : Easy-Clanpage 2.1 http://www.easy-clanpage.de /?section=downloads&action=viewdl&id=16 +Price : for free +Language : PHP +Discovered by Easy Laster +Security Group...
Multi Auktions Komplett System V2 <= Blind SQL Injection Exploit
Exploit for php platform in category web applications ================================================================ Multi Auktions Komplett System V2 1 ----------------------------------------------------------------------------------------- Exploit !/usr/bin/env python -- coding:utf-8 -- impo...
Date and Sex Vor und Ruckwarts Auktions System Blind SQL Injection
----------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System 1 --------------------------------------------------------------------------------------...
Easy-Clanpage <= v2.0 Blind SQL Injection Exploit
Exploit for php platform in category web applications ================================================= Easy-Clanpage 1 ----------------------------------------------------------------------------------------- Blind SQL Injection Exploit !/usr/bin/env python -- coding:utf-8 -- import sys, urllib2...
Enomaly ECP code execution
VMCasting payload signing is not implemented during software update process...
Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation.
Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation. Synopsis Enomaly ECP up to and including v3.0.4 is believed to contain an insecure silent update mechanism that could allow a remote attacker to execute arbitrary code as root, and to inject or modify VM workloads for...
Enomaly ECP多个安全漏洞
BUGTRAQ ID: 33544 CVECAN ID: CVE-2008-4990,CVE-2009-0390 Enomaly ECP（之前名为Enomalism）是用于管理虚拟机的软件。 ECP的enomalism2.sh中存在多个安全漏洞，本地攻击者可以通过符号链接攻击以root用户权限覆盖任意系统文件、向kill命令注入参数以终止任意进程或向进程发送信号，或导致虚拟机无法启动。 Enomaly Elastic Computing Platform 2.1 临时解决方法： 将PIDFILE从/tmp/enomalism2.pid更改为/var/run/enomalism2.pid。...
Enomaly ECP / Enomalism < 2.2.1 Multiple Local Vulnerabilities
No description provided by source. Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in...