Default credentials

A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource...

CVE-2018-1097: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource...

WampServer 3.1.2 CSRF to add or delete any virtual hosts remotely Vulnerability

Exploit for php platform in category web applications WampServer 3.1.2 CSRF to add or delete any virtual hosts remotely CVE-2018-8817 CSRF Cross site request forgery in WampServer 3.1.2 which allows a remote attacker to force any victim to add or delete virtual hosts...

CVE-2017-16614

SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...

Server side request forgery (ssrf)

SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...

CVE-2017-16614

SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...

[SECURITY] Fedora 28 Update: puppet-4.10.10-1.fc28

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

Unitrends Backup Remote Code Execution Vulnerability

Unitrends Backup UB is a set of data protection software from the American company Unitrends. The software provides data backup, data recovery and deduplication functions. A security vulnerability exists in the user interface of UB versions prior to 10.1.0. The vulnerability can be exploited to...

LibreSSL Information Disclosure Vulnerability

LibreSSL is a fork of the OpenSSL cryptographic software library developed by the OpenBSD project and an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. LibreSSL version 2.7.0 prior to 2.7.1 contains a security vulnerability in the...

Webmin < 1.280 Directory Traversal

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.280. It is, therefore, affected by a directory traversal vulnerability that could allow attackers to read arbitrary files. Note: This vulnerability only affects Webmin installs on Windows hosts. C...

Directory Traversal

github.com/kubernetes/kubernetes is vulnerable to directory traversal attacks. Containers using subpath volume mounts can access files and directories outside of the volume, this includes other files on the hosts' system...

Authentication flaw

It was discovered that the Unitrends Backup UB before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes...

CVE-2018-6328

It was discovered that the Unitrends Backup UB before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes...

PT-2018-17479

Name of the Vulnerable Software and Affected Versions Unitrends Backup versions prior to 10.1.0 Description The issue allows an unauthenticated user to bypass authentication and inject arbitrary commands into the parameters using backquotes in the "/api/hosts" API endpoint. Recommendations For...

CVE-2018-6328: Improper Authentication

It was discovered that the Unitrends Backup UB before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes...

SUSE-SU-2018:0604-1 Security update for cups

This update for cups fixes the following issues: - CVE-2017-18190: Removed localhost.localdomain from list of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP command execution in conjunction with DNS rebinding. bsc1081557...

openstack-nova: Nova Filter Scheduler bypass through rebuild action

By rebuilding an instance using a new image, an authenticated user may be able to circumvent the Filter Scheduler, bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter...

CVE-2017-12161

It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further...

PT-2018-5373

Name of the Vulnerable Software and Affected Versions keycloak versions prior to 3.4.2 Description A flaw was discovered that allows an attacker to misuse a client-side /etc/hosts entry to spoof a URL in a password reset request. This could lead to an attacker crafting a malicious password reset...

CVE-2017-12161: Client-Side Enforcement of Server-Side Security

It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further...