The vulnerability of the Windows operating system allows a perpetrator to circumvent existing access restrictions or establish a connection for an account with a empty password.

The vulnerability of the RDP service implementation in the Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or establish a connection for an account with a empty password using a...

CVE-2016-0019

The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...

CVE-2015-7249

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.kPE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action...

Denial of Service

Overview Versions of ecstatic prior to 1.4.0 are affected by a denial of service vulnerability when certain input strings are sent via the Last-Modified or If-Modified-Since headers. Parsing certain inputs with new Date or Date.parse cases v8 to crash. As ecstatic passes the value of the affected...

UBUNTU-CVE-2015-6777

Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via...

Security Update for Microsoft Project 2013 (KB3101506) 64-Bit Edition

A security vulnerability exists in Microsoft Project 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

XcodeGhost Apple AppStore Malware

As more eyes peer into XcodeGhost, the malware that managed to sneak into Apple’s App Store, more trouble bubbles to the surface. Researchers at Palo Alto Networks said in an updated report that the malware contains a vulnerability that allows an attacker in man-in-the-middle position to control...

QNAP crypto keys logged on unencrypted disk partition in world accessible files

Affected devices: ================= Probably all QNAP devices running the QNAP modified 3.12.6 kernel with firmware older than 4.1.4 Build 0804. Verified on TS-453S Pro and TVS-471, both with Firmware 4.1.4 Build 0522. Probably fixed with Firmware 4.1.4 Build 0804 incriminating message gone, thou...

CVE-2015-3244

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...

CVE-2015-3714

Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via a modified app...

CVE-2015-3714

CVE-2015-3714 affects Apple OS X prior to 10.10.4, where custom resource rules were not properly considered during app signature verification, allowing a modified app to bypass launch restrictions. The issue is documented across multiple sources (NVD/NVD listings and security advisories) and is a...

IBM Leads Limit Bypass Vulnerability

IBM Leads is a solution from IBM USA for improving the customer management process. The program provides functions such as finding prospects, assigning customers and sending notifications of new customer information. A security vulnerability exists in IBM Leads. A remote attacker could exploit th...

PT-2015-4487

Name of the Vulnerable Software and Affected Versions IBM Leads versions 7.x, 8.1.0 before 8.1.0.14 IBM Leads versions 8.2 IBM Leads versions 8.5.0 before 8.5.0.7.3 IBM Leads versions 8.6.0 before 8.6.0.8.1 IBM Leads versions 9.0.0 through 9.0.0.4 IBM Leads versions 9.1.0 before 9.1.0.6.1 IBM Lea...

CVE-2015-0126: Undefined Security Weakness

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to bypass intended file-upload restrictions via a modified extension...

PT-2016-2330

Name of the Vulnerable Software and Affected Versions Apache Struts versions 1.1 through 1.3.10 Description The issue allows remote attackers to bypass intended access restrictions. This is due to insufficient input validation in the MultiPageValidator implementation. The exploitation can occur...

The vulnerability of the `read_nttrans_ea_list` function in software for accessing Samba network drives involves integer overflow through modified records in the document table, allowing an attacker to cause service failure.

The vulnerability of the readnttransealist function in software for accessing Samba network drives is related to integer overflow caused by entries created in the table. Exploiting this vulnerability allows a malicious actor to cause service failures...

X-Cart Privilege Access Vulnerability

X-Cart is an open source PHP e-commerce software . The software provides favorites , order records and inventory management modules. A security vulnerability exists in X-Cart 5.1.10 and earlier versions. A remote attacker can exploit this vulnerability by sending a modified update or delete reque...

CVE-2015-0951

X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified 1 update or 2 remove request...

CVE-2015-1356

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file...

Fix Firefox（Firefox browser commonly used security test plug-in Live HTTP Headers replay function-vulnerability warning-the black bar safety net

Live Http headers for Firefox the following Http header capture tool, commonly used in safety tests. But unfortunately the Replay function is not in the most recent version of the Firefox browser35.0.1, I decided to plug-in the official version of the update before to do a temporary repair. I fou...