2812 matches found
NoSQL Injection
A NoSQL injection occurs when a value originating from the client's request is used within a NoSQL call without prior sanitisation. This can allow cyber-criminals to execute arbitrary NoSQL code and thus steal data, or use the additional functionality of the database server to take control of...
LDAP Injection
Lightweight Directory Access Protocol LDAP is used by web applications to access and maintain directory information services. One of the most common uses for LDAP is to provide a Single-Sign-On SSO service that will allow clients to authenticate with a web site without any interaction assuming...
Information Exposure in JUnit Report Macro
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-52112. panel The JUnit Report Macro throws different error messages for the url parameter code:java file:///no/file/herecode...
Information Disclosure
console-common is susceptible to information disclosure. The vulnerability exists because detailed error messages reveal a REST Endpoint to the user...
Change of Expired LDAP Password on NetScaler During Log On Fails Intermittently
Changing the expired LDAP password at the time of user login via NetScaler Gateway due to password-expiry may fail and demonstrate itself on the login page as: "Incorrect credentials. Try again." or "Cannot connect. Try connecting again." ifEnhanced Authentication Feedback is enabled: At the time...
PYSEC-2017-42
The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...
PYSEC-2017-42
The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...
CVE-2017-5537
The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...
Navetti PricePoint 4.6.0.0 XSS / CSRF / SQL Injection Vulnerabilities
Exploit for php platform in category web applications title: Multiple vulnerabilities product: Navetti PricePoint vulnerable version: 4.6.0.0 fixed version: 4.7.0.0 or higher CVE number: - impact: high/critical homepage: http://www.navetti.com/ found: 2016-07-18 by: W. Schober Office Vienna SEC...
Breaking down a notably sophisticated tech support scam M.O.
Note: Our Tech support scams FAQ page has the latest info on this type of threat, including scammer tactics, fake error messages, and the latest scammer hotlines. You can also read our latest blog, New tech support scam launches communication or phone call app. The cornerstone of tech support sca...
IBM Security Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2017-01411)
IBM Security Key Lifecycle Manager formerly known as TivoliKeyLifecycleManager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security vulnerability exists in IBM...
CVE-2016-9748
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system...
CVE-2016-6094
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data...
User enumeration with error messages - ownCloud
This issue occurs at sending a password reset E-Mail, where a difference in error messages could allow an attacker to determine if the username is valid or not Affected Software ownCloud Server 9.1.3 CVE-2017-5865 core/d2f47acb38675d2798fe9e9b6294981f24613d40 ownCloud Server 9.0.7 CVE-2017-5865...
Flooding logfiles with a 1 Bit BMP File - ownCloud
An Attacker can upload a 1 Bit BMP File and the server hangs and doesn't stop to populate a logfile Affected Software ownCloud Server 9.1.3 CVE-2017-5867 core/0f1da72db6cd3ca08d166d96c57f39b8563d048f ownCloud Server 9.0.7 CVE-2017-5867 core/69fcf706fc7125c028b87fe8224a544ff124dc4b ownCloud Server...
Server: User enumeration with error messages
This issue occurs at sending a password reset E-Mail, where a difference in error messages could allow an attacker to determine if the username is valid or not For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
CVE-2016-5988
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...
CVE-2016-5988
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...
