Shopify: Shopify Stocky App OAuth Misconfiguration

@vulnh0lic noticed that a staff member without Apps permission was able to access the Stocky app. We determined that this was because of a bug in Stocky's OAuth authentication code, which allowed the user to be granted access to Stocky at the start of the OAuth process rather than the end. This...

CVE-2013-4657

Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service...

CVE-2013-4657

The CVE-2013-4657 entry describes a Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L caused by misconfiguration in the SMB service. Affected product(s): NETGEAR WNR3500U and WNR3500L routers. Reported impact in the sources indicates high severity, with the vulnerability enabling p...

CVE-2013-4655

Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service...

Design/Logic Flaw

Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service...

CVE-2013-4655

Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service...

CVE-2013-4656

Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service...

Design/Logic Flaw

Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service...

CVE-2013-4656

The CVE-2013-4656 entry describes a symlink traversal vulnerability in the SMB service caused by misconfiguration on affected devices. The affected products are ASUS RT-AC66U and RT-N56U ; the underlying issue is misconfigured SMB leading to a path traversal vulnerability. Reported impact is seve...

CVE-2013-4656

Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service...

U.S. Dept Of Defense: CORS Misconfiguration Leads to Exposing User Data

Vulnerable Asset: https://██████/█████████/ Discovery: - Upon accessing the site we discover two specific response headers which indicates that a cross-domain request for sensitive information might be possible 1. Access-Control-Allow-Origin: injectable 2. Access-Control-Allow-Credentials: true -...

Dell RSA BSAFE Micro Edition Suite Information Disclosure Vulnerability (CNVD-2019-40481)

Dell RSA BSAFE Micro Edition Suite is an encryption toolkit from Dell USA. An information disclosure vulnerability exists in Dell RSA BSAFE Micro Edition Suite. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An attacker...

openstack-octavia: amphora-agent not requiring client certificate

A certificate-validation error has been found in Octavia's amphora-agent, where an attacker with management-network access could bypass an amphora's client-certificate based authentication. Because the agent's HTTP server gunicorn had 'certreqs' set to 'True' instead of 'ssl.CERTREQUIRED',...

Clario: CORS Misconfiguration, could lead to disclosure of sensitive information (translate.kromtech.com)

Summary CORS Misconfiguration, could lead to disclosure of sensitive information translate.kromtech.com Steps to reproduce In PoC section we send Origin: http://owmzuoswdxrx.com header and server respond to us with Access-Control-Allow-Origin: http://owmzuoswdxrx.com and...

Adobe ColdFusion RDS Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Adobe ColdFusion RDS Authentication Bypass', 'Description' = %q Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass...

openstack-octavia: amphora-agent not requiring client certificate

A certificate-validation error has been found in Octavia's amphora-agent, where an attacker with management-network access could bypass an amphora's client-certificate based authentication. Because the agent's HTTP server gunicorn had 'certreqs' set to 'True' instead of 'ssl.CERTREQUIRED',...

kubernetes: Incorrect rule injection in CNI portmap plugin

Cloud Native Computing Foundation CNCF CNI Container Networking Interface 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE-...

freeradius: privilege escalation due to insecure logrotate configuration

It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user...

Reverse Tabnabbing

showdown is vulnerable to reverse tabnabbing. The vulnerability exists due to a misconfiguration whereby the setting of rel="noopener noreferrer" is not set when openLinksInNewWindow is on...

Hyundai Pay Kasse HK-1000 Information Disclosure Vulnerability

The Hyundai Pay Kasse HK-1000 is a hardware-based cryptocurrency wallet device. An information disclosure vulnerability exists in the Hyundai Pay Kasse HK-1000, which arises from a configuration or other error in the operation of a networked system or product, and can be exploited by an...