4606 matches found
PHPCMS V9 version of the background design flaws lead to arbitrary code execution vulnerability
Source link: http://www.cnbraid.com/ 0x01 background Since the default after installation requires Super administrator privileges, so the vulnerability is very tasteless, but the feeling should be in other cms, there are also, so the main share under the mining idea PS: using the test environment...
The vulnerability of the microprogrammed Ethernet converter software from Vlinx, VESP 211-232-EU and Vlinx VESP 211-EU, which allows a hacker to perform administrative actions.
The vulnerability of the web interface of the microprogramming-based Ethernet converter software Vlinx VESP 211-232-EU and Vlinx VESP 211-EU is related to access control implementation errors. Exploiting this vulnerability allows a malicious actor to perform administrative actions using modified...
The vulnerability of the Apache HTTP Server web server allows attackers to trigger a service failure.
The vulnerability of the Apache HTTP Server is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions through modified control streams...
Security Update for Word Viewer (KB3115395)
A security vulnerability exists in Word Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...
Design/Logic Flaw
Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...
EMC RSA Data Loss Prevention Security Restriction Bypass Vulnerability
EMC RSA Data Loss Prevention monitors network traffic and protects against data loss. A security restriction bypass vulnerability exists in EMC RSA Data Loss Prevention versions prior to 9.6 SP2 P5. A remote attacker could exploit this vulnerability to bypass target object access restrictions via...
CVE-2016-0894
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...
Caching best practices & max-age gotchas
Getting caching right yields huge performance benefits, saves bandwidth, and reduces server costs, but many sites half-arse their caching, creating race conditions resulting in interdependent resources getting out of sync. The vast majority of best-practice caching falls into one of two patterns:...
The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Cisco TelePresence Server control device is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot by sending modified STUN packets remotely...
The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot through modified SIP messages...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
Code injection
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
The vulnerability of the Mac OS X operating system, which allows a hacker to bypass the security measures
The vulnerability of the dyld component in the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker acting locally to bypass security measures by using a modified application...
悟空CRM从无任何权限到Getshell漏洞分析
简要描述： 这是一个无需账户的getshell。 此漏洞专为打某人脸，哈哈 附带一个判断某某的小技巧，较实用。 详细说明： 悟空CRM大部分功能是需要登录，登录以后的漏洞比较鸡肋，那么我发一个越权，从无任意权限到拿下管理员权限，到getshell。 看到检查权限的类 App/Lib/Behavior/AuthenticateBehavior.class.php： class AuthenticateBehavior extends Behavior protected $options = array; public function run&$params $m = MODULENAM...
Modified Cars - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Modified Cars published at the 'play' market has multiple vulnerabilities...
LocalTapiola: Posting modified information in 'Investment section' will cause unintended information change in verkkopalvelu.tapiola.fi
Hello, Some strange account information modification is ongoing when intercepting and making small modifications to requests in 'investment section'. Login to portal and go to buy shares https://verkkopalvelu.tapiola.fi/jb2/ltvr/purchases or similar and pic 2025 A shares, intercept requests and...