Authentication flaw

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authent...

Denial of service

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service...

CVE-2016-6077

IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference : 1991584...

Hash Collisions For Passwords

search-guard2 uses a cryptographically weak algorithm for computing hash values for passwords. This allows a malicious attacker to easily find a hash collision for a password...

FortiClient Unencrypted Password Vulnerability

One of the processes in FortiClient stores VPN credentials unencrypted in memory. A malicious attacker who compromised the workstation could dump the credentials...

TeamSpeak Server 3 -- Multiple vulnerabilities including Remote Code Execution

Hanz Jenson audit report: I found 10 vulnerabilities. Some of these are critical and allow remote code execution. For the average user, that means that these vulnerabilities can be exploited by a malicious attacker in order to take over any Teamspeak server, not only becoming serveradmin, but...

The vulnerability of the Android operating system, which allows a hacker to circumvent existing access restrictions

The vulnerability of the function in app/aboot/aboot.c of the Qualcomm Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions using specially crafted values...

The vulnerability of Microsoft Lync Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in Lync Server allows a malicious individual to trigger a system failure...

Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity

Vulnerability of the Java Runtime Environment, related to JavaFX components. Exploiting this vulnerability allows an attacker to manipulate data accessibility by using JavaFX components...

Enter: CSRF token leakage

Hi, I have noticed that when the account verification fails here : https://wallet.robocoin.com/verify/ due to an error, the CSRF token is being leaked via GET method like : https://wallet.robocoin.com/verify/id?csrf=b8ede20d-0c0b-4e16-9d05-6ad2ed8b72c4 So the authenticity token is being stored in...

Nullsoft Winamp 2.x/3.x/5.0.x ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11107/info Nullsoft Winamp ActiveX Control is alleged to be prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker...

Prishtina FTP Client 1.x Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7671/info Prishtina FTP client is allegedly prone to a denial of service vulnerability. The condition is reportedly triggered when processing FTP server banners of excessive length. As a result, a malicious...

Application there is a file include vulnerability Unix systems-vulnerability warning-the black bar safety net

Found time: Vulnerability type: a file that contains Belongs the establishment of the station program: other Belongs to the server type: General Belongs to the programming language: other Description: The target Unix system, the application may exist in the file containing the vulnerability. 1. T...

GLPI 0.83.8 SQL Injection Vulnerability

GLPI version 0.83.8 suffers from multiple error-based SQL injection vulnerabilities. Input passed via the POST parameter 'usersidassign' in '/ajax/ticketassigninformation.php' script, POST parameter 'filename' in '/front/document.form.php' script, and POST parameter 'table' in...

McAfee SaaS MyCioScan ShowReport Remote Command Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Oracle Hyperion Financial Management ActiveX File Upload

Added: 11/15/2011 BID: 50476 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for scripting and...

Eircom Netopia Router Backdoor

++++++++++++++++++++ FULL DISCLOSURE OF EIRCOM NETOPIA ROUTER BACKDOOR VULNERABILITY! Yes, failcom suck, and they did it again. DERP! They gave us a nice TELNET shell into their routers, and now we can mess about 'cos it spawns a root shell by magic! and magic is the actual command! They also lef...

phpcms 2 0 0 8 sp4 explosive paths and arbitrary file deletion vulnerabilities and fixes-vulnerability warning-the black bar safety net

phpcms 2 0 0 8 sp4 explosive paths and arbitrary file deletion vulnerability and fix Affected versions: phpcms 2 0 0 8 sp4 Official address: www.phpcms.cn Vulnerability type: explosive paths and arbitrary file deletion Vulnerability Description: a certain page, not as fault-tolerant processing...

Netease Weibo CSRF two use-vulnerability warning-the black bar safety net

Does not perform token authentication vulnerable to CSRF attacks Detailed description: A malicious attacker may construct a malicious form, and the defrauded victims of the click, when the victim clicks on the link, on behalf of the victim to produce a microblogging information, this method can...

Aris AGX agXchange ESM Open Redirection Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 Aris AGX agXchange ESM Open Redirection Vulnerability ========================================= ===================== I. BACKGROUND ===================== E2B safety submissions module. When it comes to the...