Nord Security: CORS Misconfiguration on nordvpn.com leading to Private Information Disclosure,Account takeover

Summary: An cross-origin resource sharing CORS policy controls whether and how content running on other domains can perform two-way interaction with the domain that publishes the policy. The policy is fine-grained and can apply access controls per-request based on the URL and other features of th...

SAP Portfolio and Project Management Information Disclosure Vulnerability

SAP Portfolio and Project Management PPM is a suite of asset portfolio and project management software from SAP. The software supports the management of the entire project lifecycle, identifying project exceptions and risks, and reporting on project performance based on real-time data. An...

SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2019-46440)

SAP Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. An information disclosure vulnerability exists in SAP Adaptive Server Enterprise versions 15.7 a...

Intel Baseboard Management Controller Information Disclosure Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. An information disclosure vulnerability exists in Intel BMC, which arises from errors in the configuration of a networked system or product during operation, and can be exploited by an...

Birth Certificate Data Laid Bare on the Web in Multiple States

A third-party government supplier has exposed hundreds of thousands of applications containing birth-certificate data. The trove of information is owned by a company that provides an online platform to state governments – including California, New York and Texas – that allows residents to request...

The vulnerability of Google Chrome’s browser, related to security configuration errors, allows a malicious actor to gain unauthorized access to local files.

The vulnerability of Google Chrome is related to security settings errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to local files through a specially created Chrome extension...

SAP NetWeaver Application Server Java Information Disclosure Vulnerability

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server Java. The...

CORStest - A Simple CORS Misconfiguration Scanner

A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...

AT&T, Verizon Subscribers Exposed as Mobile Bills Turn Up on the Open Web

Hundreds of thousands of mobile phone bills for AT&T, Verizon and T-Mobile subscribers have been laid open to anyone with an internet connection, thanks to the oversight of a contractor working with Sprint. According to a media investigation, the contractor misconfigured a cloud storage bucket on...

New Relic: NR-wide cross account access through misconfigured CORS-policy of multiple endpoints

Hey guys, While working at 746786, I've discovered a NewRelic-wide huge CORS-policy misconfiguration leading to cross-account data stealing and modification at a huge amount of endpoints. The vulnerability itself is that origin nr3.nr-assets.net is trusted NR-widely at many different endpoints, b...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to local files.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to security configuration errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files through a specially created HTML page...

The vulnerability in the implementation of the FileSessionDataStore class for the Jetty HTTP server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FileSessionDataStore class implementation in the Jetty HTTP server is related to a configuration error in J2EE. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by managing sessions using the...

CVE-2019-19014

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access...

Multiple Kaspersky Products Information Disclosure Vulnerability (CNVD-2020-01949)

Kaspersky Anti-Virus is a suite of antivirus programs, Kaspersky Internet Security is a suite of security software with both anti-virus and firewall features, Kaspersky Total Security is a suite of full-featured security software, and Kaspersky Internet Security is a suite of security software wi...

New Relic: Disclosure of locally served nerdpacks due to nr-local.net CORS policy misconfiguration

Hey team, I've discovered that webserver which serves NR1 nerdpacks locally after nr1 nerdpack:serve is executed allows cross-origin requests from every subdomain of nr-ext.net. Since the nr-ext.net domain is used as a sandbox for user-supplied apps, an attacker can place there a malicious code...

DEBIAN-CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...

Exploit for CVE-2019-19268

CVE-2019-19268 Affected Version: rConfig 3.9.2. Descriptio...

CVE-2019-14822

CVE-2019-14822 — ibus local privilege/information exposure . A misconfiguration in the DBus server setup in ibus (versions before 1.5.22) allows any unprivileged user to monitor and send method calls to the ibus bus of another user via the UNIX socket, enabling interception of keystrokes and pote...

CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...

CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...