722 matches found
Ubuntu 16.04 LTS / 18.04 LTS : Ansible vulnerabilities (USN-4072-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4072-1 advisory. It was discovered that Ansible failed to properly handle sensitive information. A local attacker could use those vulnerabilities to extract...
Nextcloud: Blind Stored XSS on iOS App due to Unsanitized Webview
Hi Team! I found a Blind XSS can executed on iOS App due to unsanitized webview. Using this issue, attacker can extract information from victim. Steps To Reproduce: 1. Upload malicious HTML, share to victim 2. Waiting victim to open it F487447 F487448 HTML payload attached, don't forget to change...
CQTools - The New Ultimate Windows Hacking Toolkit
CQURE Team has prepared tools used during penetration testing and packed those in a toolkit named CQTools. This toolkit allows to deliver complete attacks within the infrastructure, starting with sniffing and spoofing activities, going through information extraction, password extraction, custom...
CVE-2018-18286: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the...
CVE-2019-10673
A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become admin and subsequently extract sensitive information and execute arbitrary code. This occurs because the attacker can change the e-mail address in the...
Cross site request forgery (csrf)
sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...
CVE-2018-20329: Improper Neutralization of Special Elements used in an SQL Command
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue which may optionally be made public to extract and/or modify database information...
ReconDog v2.0 - Reconnaissance Swiss Army Knife
Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information about an ...
Shopify: H1514 Extract information about other sites (new sites) through Affiliate/Referral pages
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: This bug is based on a really...
CVE-2018-12474
Improper input validation in obs-service-tarscm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to...
CVE-2018-12474
CVE-2018-12474 is addressed by updates to obs-service-tar_scm in openSUSE/openSUSE Open Build Service. The vulnerability arises from improper input/parameter handling: crafted service parameters could trigger unexpected behavior, enabling an attacker to access files outside the target repository ...
CVE-2018-12474: Improper Input Validation
Improper input validation in obs-service-tarscm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to...
PT-2018-13120
Name of the Vulnerable Software and Affected Versions Avaya Call Management System versions R17.0.x through R18.0.x Description A vulnerability in the Supervisor component allows a local administrative user to extract sensitive information from users connecting to a remote CMS host. Recommendatio...
CVE-2018-12338: Undefined Security Weakness
Undocumented Factory Backdoor in ECOS System Management Appliance aka SMA 5.2.68 allows the vendor to extract confidential information and manipulate security relevant configurations via remote root SSH access...
PT-2018-11134
Name of the Vulnerable Software and Affected Versions ECOS System Management Appliance aka SMA version 5.2.68 Description The issue concerns an undocumented factory backdoor that allows the vendor to extract confidential information and manipulate security-relevant configurations. This is achieve...
PT-2018-3447
Name of the Vulnerable Software and Affected Versions: Open Build Service versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106 Description: The issue is related to improper input validation in the obs-service-tar scm of Open Build Service, allowing remote attackers to cause access and extra...
Dumpzilla - Extract All Forensic Interesting Information Of Firefox, Iceweasel And Seamonkey Browsers
Dumpzilla official site : www.dumpzilla.org http://www.dumpzilla.org "Mozilla browser forensic tool" Manual : Español http://dumpzilla.org/Manualdumpzillaes.txt "Manual en español de dumpzilla" / English http://dumpzilla.org/Manualdumpzillaen.txt "Dumpzilla english Manual" SO : Unix / Win...
CVE-2018-9102: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for...
MGASA-2018-0173 Updated bugzilla packages fix security vulnerability
A CSRF vulnerability in Bugzilla's report.cgi would allow a third-party site to extract confidential information from a bug the victim had access to CVE-2018-5123...