Default credentials

Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host...

PT-2017-18834

Name of the Vulnerable Software and Affected Versions Laravel versions 5.4.x before 5.4.22 Description The issue makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host, due to the improper constraint of the host portion of a password-reset URL...

CVE-2015-0694

Cisco ASR 9000 devices running software around 5.3.0.BASE are affected by CVE-2015-0694 due to an Object-ACL matching flaw (Bug CSCur28806) that can let an unauthenticated, remote attacker bypass ACL restrictions. Impact is potential access to restricted resources or traffic alteration depending ...

CVE-2015-0694: Improper Access Control

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806...