Lark Technologies: Server Side Request Forgery

A SSRF server side request forgery vulnerability was found in the chat feature of Lark Suite on MacOS, which could have potentially been used to access services and web applications running on the internal network. We thank @jin0ne for reporting this to our team and confirming the resolution...

The vulnerability of the Check Point IKEv2 IPsec VPN protection software allows a hacker to gain access to the internal network segment through the IKEv2 VPN tunnel.

The vulnerability of the Check Point IKEv2 IPsec VPN protection software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the internal network segment through the IKEv2 VPN tunnel...

CVE-2019-7277

Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...

Information disclosure

Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...

CVE-2019-7277

CVE-2019-7277 (Optergy Proton/Enterprise) affects Optergy Proton/Enterprise Building Management System. Public sources cite an unauthenticated internal network information disclosure vulnerability, enabling an attacker to obtain sensitive system details (e.g., internal IP, hostname, DNS informati...

PT-2019-18507

Name of the Vulnerable Software and Affected Versions Optergy Proton/Enterprise devices affected versions not specified Description The issue allows for unauthenticated internal network information disclosure. Recommendations At the moment, there is no information about a newer version that...

REDDOXX Appliance Information Disclosure

Advisory: Information Disclosure in REDDOXX Appliance RedTeam Pentesting discovered an Information Disclosure vulnerability in the REDDOXX appliance software, which allows unauthenticated attackers to gain information about the internal network the appliance is part of. Details ======= Product:...

CVE-2019-7277: Undefined Security Weakness

Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...

GitLab: Server Side Request Forgery mitigation bypass

Summary This vulnerability allows attacker to send arbitrary requests to local network which hosts GitLab and read the response. This is possible due to flawed DNS rebinding protection. The attack is possible due to flaw here:...

Server-Side Request Forgery (SSRF)

phpbb/phpbb is vulnerable to server-side request forgery SSRF. A remote attacker is able to send requests on behalf of the server via the remote avatar upload function. This allows for the discovery of and access to services running on the host, resulting in bypass of firewall rules or potentiall...

Xxe

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

CVE-2017-18111

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

PT-2019-8260

Name of the Vulnerable Software and Affected Versions Atlassian Application Links versions 5.0.0 through 5.0.9 Atlassian Application Links versions 5.1.0 through 5.1.2 Atlassian Application Links versions 5.2.0 through 5.2.5 Description The issue allows malicious OAuth application linked...

CVE-2017-18111: Improper Restriction of XML External Entity Reference

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

GSA Bounty: SSRF in Search.gov via ?url= parameter

Summary: https://search.usa.gov/helpdocs endpoint is vulnerable to SSRF via url parameter. The parameter is protected but can be bypassed using LF %0A. Steps To Reproduce: 1. Login to Search.gov and click help manual. 2. The following request was vulnerable. - Request GET...

CVE-2019-9761

An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechatgetxml in include/plugin/payment/wechat/notifyurl.php...

CVE-2019-9761: Improper Restriction of XML External Entity Reference

An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechatgetxml in include/plugin/payment/wechat/notifyurl.php...

PT-2019-19852

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A security issue was discovered, allowing unauthorized access to read any file in the system or scan the internal network without authentication. This is due to a call to wechat getxml in the...

Omise: SSRF in webhooks leads to AWS private keys disclosure

Vulnerability Summary Omise makes use of Amazon AWS as their application environment. Due to a vulnerability in the way webhooks are implemented, an attacker can make arbitrary HTTP/HTTPS requests from the application server and read their responses. This is known as a server-side request forgery...

Citrix Data Breach – Iranian Hackers Stole 6TB of Sensitive Data

Popular enterprise software company Citrix that provides services to the U.S. military, the FBI, many U.S. corporations, and various U.S. government agencies disclosed last weekend a massive data breach of its internal network by "international cyber criminals." Citrix said it was warned by the F...