2 matches found
Default credentials
Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host...
CVE-2015-0694
Cisco ASR 9000 devices running software around 5.3.0.BASE are affected by CVE-2015-0694 due to an Object-ACL matching flaw (Bug CSCur28806) that can let an unauthenticated, remote attacker bypass ACL restrictions. Impact is potential access to restricted resources or traffic alteration depending ...