PT-2017-7232

Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1 Description The issue allows remote attackers to trigger outbound requests and enumerate open ports. This is achieved via the dbhost parameter to specific API endpoints, including 'libs/org/adodb lite/tests/test adodb...

PT-2017-15404

Name of the Vulnerable Software and Affected Versions macOS Server versions prior to 5.3 Description An issue was discovered in macOS Server, involving the Wiki Server component. It allows remote attackers to enumerate user accounts via unspecified vectors. Recommendations For versions prior to...

PYSEC-2017-42

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2016-4950

CVE-2016-4950 affects Cloudera Manager 5.5 and earlier. A remote attacker could enumerate user sessions by calling /api/v11/users/sessions, exposing active sessions information. Public descriptions confirm the issue is an access-control flaw in the sessions API. The IBM security bulletin maps CVS...

CVE-2016-7982

Directory traversal vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the varurl parameter in a validerxml action...

PT-2017-9444

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description A directory traversal issue exists, allowing remote attackers to enumerate system files via the var url parameter in a "valider xml" action. Recommendations For SPIP versions 3.1.2 and earlier, updat...

Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

MYSQL Directory Write Test

Enumerate writeable directories using the MySQL SELECT INTO DUMPFILE feature, for more information see the URL in the references. Note: For every writable directory found, a file with the specified FILENAME containing the text test will be written to the directory. This module requires Metasploit...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

Code injection

The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailederroronconnect option is not supported or is configured as "False," which allows remote attackers to enumerat...

Recent File History

Nessus was able to gather evidence of files opened by file type from the remote host. C Tenable Network Security, Inc. include"compat.inc"; if !definedfunc"nasllevel" || nasllevel 5200 exit0, "Not Nessus 5.2+"; if description scriptid92428; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15...

Windows Mapped Network Drives

Nessus was able to generate a report of mapped network drives on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid92422; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:27"; scriptnameenglish:"Windows Mapped Network Drives";...

Samba Data Compromise

The vulnerability exists in Samba under certain settings of shadow copying vfs. It stems from an improper initialization of the SRVSNAPSHOTARRAY field. Exploiting this vulnerability allows remote users who have passed authentication to access confidential information from the process’s memory,...

PT-2016-4853

Name of the Vulnerable Software and Affected Versions BMC BladeLogic Server Automation BSA versions 8.2.x through 8.7.x Description The issue allows remote attackers to bypass authorization and enumerate users by sending an action packet to the xmlrpc endpoint after an authorization failure. This...

CVE-2016-4791

The administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery SSRF attacks via unspecified vectors...

CVE-2016-2513

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests...

Code injection

The Secure Meeting Pulse Collaboration in Pulse Connect Secure formerly Juniper Junos Pulse before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate...

F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability

+------------------------------------------------------+ + F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability + +------------------------------------------------------+ Affected Product : F5 BIG-IP Vendor Homepage : http://www.f5.com/ Version : 10.1.0 Vulnerability Category : Local vulnerabilit...

F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability

Affected Product : F5 BIG-IP Vendor Homepage : http://www.f5.com/ Version : 10.1.0 Vulnerability Category : Local vulnerability Discovered by : Anastasios Monachos secuid0 - anastasiosm at gmail dot com CVE : CVE-2014-8727 Patched : Yes An authenticated user with either "Resource Administrator" o...