Authorization

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value...

CVE-2018-10212

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value...

PT-2018-9759 · Vaultize · Vaultize Enterprise File Sharing

Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31 Description: An issue was discovered that allows improper authorization, leading to the creation of folders within another account via a modified device value. Recommendations: For Vaultize...

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in access control. This allows a intruder to gain full control over the device.

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in access control. Exploiting these vulnerabilities could allow an attacker, operating remotely, to...

Code injection

PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4018342)

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Design/Logic Flaw

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control...

Secutech RiS-11/RiS-22/RiS-33 5.07.52_es_FRI01 Remote DNS Changer

Secutech RiS-11/RiS-22/RiS-33 V5.07.52esFRI01 Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable systems or devices w...

memorialmatters.com XSS vulnerability

Open Bug Bounty ID: OBB-595250 Description| Value ---|--- Affected Website:| memorialmatters.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

modified-shop.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-594931 Description| Value ---|--- Affected Website:| modified-shop.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

tinhdau100.com XSS vulnerability

Open Bug Bounty ID: OBB-594585 Description| Value ---|--- Affected Website:| tinhdau100.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

or4pets.co.il XSS vulnerability

Open Bug Bounty ID: OBB-582709 Description| Value ---|--- Affected Website:| or4pets.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4018293) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4011692)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4011692) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

shoraonline.ir XSS vulnerability

Open Bug Bounty ID: OBB-579368 Description| Value ---|--- Affected Website:| shoraonline.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php...

pleonb.com XSS vulnerability

Open Bug Bounty ID: OBB-559145 Description| Value ---|--- Affected Website:| pleonb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

New Mac cryptominer distributed via a MacUpdate hack

Early this morning, security researcher Arnaud Abbati of SentinelOne tweeted about new Mac malware being distributed via MacUpdate. This malware, which Abbati has named OSX.CreativeUpdate, is a new cryptocurrency miner, designed to sit in the background and use your computer's CPU to mine the...

Polaris office 2017 has a memory copy overflow vulnerability

Polaris Office is an office software developed by INFRAWARE in Korea. You can view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides and other commonly used office documents. Polaris office 2017's PWord.exe is the program used to view doc documents, and when opening a doc...