PT-2015-7702

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.23.11 MediaWiki versions 1.24.x prior to 1.24.4 MediaWiki versions 1.25.x prior to 1.25.3 Description The issue allows remote authenticated users to have an unspecified impact via multiple file uploads due to a la...

CVE-2015-7861: Undefined Security Weakness

Persistent Accelerite Radia Client Automation formerly HP Client Automation, possibly before 9.1, allows remote attackers to execute arbitrary code by sending unspecified commands in an environment that lacks relationship-based firewalling...

CVE-2015-6322: Undefined Security Weakness

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.18 allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563...

InduSoft Web Studio Remote Agent Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of InduSoft WebStudio. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Remote Agent service listening on TCP port 1234. The issue lies in the lack o...

Cisco AnyConnect Secure Mobility Client for Windows Privilege Escalation Vulnerability

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. The vulnerability is due to lack of checks in the code f...

PT-2015-6361

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare Building Expert MPM versions prior to 2.15 Description The issue concerns the lack of encryption for the client-server data stream, allowing remote attackers to discover credentials by sniffing the network...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to execute arbitrary commands during guest access.

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server lies in the lack of access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands during guest access using a special web page...

The vulnerability of the Firefox OS operating system allows a perpetrator to gain access to protected information contained in system messages.

The vulnerability of the Firefox OS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information contained in system messages, through a specially crafted application...

PT-2015-1849

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.8 Apple Safari versions 7.x prior to 7.1.8 Apple Safari versions 8.x prior to 8.0.8 Description The issue is related to the browser's security settings, allowing remote attackers to conduct spoofing attacks...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe AIR software platform is related to lack of access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions from a remote location...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe AIR software platform is related to lack of access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions from a remote location...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe AIR software platform is related to lack of access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions from a remote location...

PT-2015-6022

Name of the Vulnerable Software and Affected Versions Research Artisan Lite versions prior to 1.18 Description The issue allows remote attackers to perform unspecified actions due to a lack of authentication verification. Recommendations For Research Artisan Lite versions prior to 1.18, update to...

HackerOne: Accessing title of the report of which you are marked as duplicate

Hello, You can see the title of the report of which you are marked as Duplicate Steps to Reproduce: 1. Report a bug to a team 2. Now that team marks your bug as 'Duplicate ReportID.but does not shares the report with you 3. When that bug is marked as Resolved then you can see the title of that bu...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

PT-2015-6007

Name of the Vulnerable Software and Affected Versions Zoho NetFlow Analyzer versions 10250 and earlier Description The issue allows remote attackers to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role, due to a lack of administrative authorization...

Tor Cloud Shut Down Amid Lack of Support

The Tor Project has shuttered its cloud proxy service citing security vulnerabilities, usability bugs and a lack of resources. Tor offers its users the capacity to surf the Web anonymously, bouncing traffic through a series of relay servers so that no observer at any point can tell where that...

WordPress Ultimate Product Catalogue 3.1.2 XSS / CSRF / File Upload

Exploit Title: Multiple Persistent XSS & CSRF & File Upload on Ultimate Product Catalogue 3.1.2 Google Dork: inurl:"SingleProduct" intext:"Back to catalogue" intext:"Category", inurl:"/wp-content/plugins/ultimate-product-catalogue/product-sheets/" Date: 22/04/2015 Exploit Author: Felipe Molina de...

PT-2015-4965

Name of the Vulnerable Software and Affected Versions EasyCTF versions prior to 1.4 Description The issue allows remote attackers to obtain access via a crafted HTTP request due to the lack of session ID validation. Recommendations For versions prior to 1.4, update to version 1.4 or later to...

LifeCare PCA Infusion System Unvalidated Remote Pharmacy Operations Vulnerability

The LifeCare PCA Infusion System is an infusion pump solution. A security vulnerability in the WEB interface of the LifeCare PCA Infusion System device allows a remote attacker to upload an arbitrary medication library to the device due to a lack of proper authentication...