PT-2017-13705

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Adapters versions 6.0 through 7.0 Description The issue allows anonymous users to access protected areas due to a lack of authentication check for a critical resource or functionality. Recommendations For IBM...

Dell EMC VNX Monitoring and Reporting RMI Registry Deserialization of Untrusted Data Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service on vulnerable installations of Dell EMC VNX Monitoring and Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within ...

CVE-2015-6592: Undefined Security Weakness

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

PT-2017-7040

Name of the Vulnerable Software and Affected Versions Huawei UAP2105 version before V300R012C00SPC160BootRom Description The issue concerns a lack of authentication requirement for access to the serial port or the VxWorks shell. Recommendations For versions prior to V300R012C00SPC160BootRom, upda...

Trend Micro Control Manager CCGIServlet KnownAttackDetectionResult SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within processing of...

Trend Micro Control Manager AdHocQueryExportProcessing SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within processing of...

Trend Micro Control Manager CCGIServlet SHA1DenyDetectionResult SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within processing of...

The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.

The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Trend Micro Control Manager CCGIServlet CorrelatedIncidentResult SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within processing of...

PT-2017-12426

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS affected versions not specified Description A vulnerability in the HTTP web interface could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization AO related process to...

laranjinha.com XSS vulnerability

Vulnerable URL: https://www.laranjinha.com/pt/search?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2401843 VIP website...

CVE-2017-1002017

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability...

PT-2017-10995

Name of the Vulnerable Software and Affected Versions DTracker version 1.5 Description The issue concerns a lack of authorization check in the DTracker plugin for WordPress. Specifically, the code in dtracker/save contact.php does not verify user authorization before adding new contacts to the wp...

PT-2017-11013

Name of the Vulnerable Software and Affected Versions Kind Editor version 4.1.12 Description The issue concerns a lack of authentication check in the file upload functionality. Specifically, the kindeditor/php/upload json.php endpoint does not verify user authentication before allowing file...

PT-2017-11005

Name of the Vulnerable Software and Affected Versions Flickr Picture Backup version 0.7 Description The issue concerns a lack of authentication and permission checks in the flickr-picture-download.php code, allowing unauthorized file uploads. Recommendations For version 0.7, consider disabling th...

EMC AlphaStor Library Manager < 4.0 build 910 - Opcode 0x4f Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'EMC AlphaStor Library Manager Opcode 0x4f', 'Description' = %q This module exploits a stack based buffer overflow found in EMC Alphastor Library Manager version 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL',...

PT-2017-3113

Name of the Vulnerable Software and Affected Versions SAP POS Xpress Server affected versions not specified Description The issue is related to the lack of authentication procedures in the Xpress Server component of SAP POS software. This allows a remote attacker to read and erase files, shut dow...

Microsoft Office PowerPoint ppt File Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2017-6637

Name of the Vulnerable Software and Affected Versions Beaker versions prior to 20.1 Description The issue concerns the lack of access controls on the admin pages for power types and key types in Beaker. This allows remote authenticated users to modify these types by navigating to the respective...

PT-2017-2972

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the asf build simple index function, which can cause huge CPU consumption. This occurs when a crafted ASF file with a large "ict" field in the heade...