3396 matches found
Sharing the Secrets: Pwning an industrial IoT router
I get involved in a lot of IoT and ICS pen tests and found an interesting device on one of them. I didn’t have enough time on the job to go as deep as I wanted, so got PTP to buy a couple to play with. eBay FTW! It’s an Ewon Flexy IoT Router. It’s important to note that local access / public IP...
WordPress Count per Day Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Count per Day plugin is a plugin that counts the number of visitors to a web page. A cross-site scripting vulnerability exists in...
WordPress Count per Day Plugin < 3.2.6 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2013-7472
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpdmetaboxes daytoshow parameter...
CVE-2013-7472
The CVE-2013-7472 issue affects the WordPress Count per Day plugin prior to version 3.2.6, where an XSS vulnerability can be triggered via the daytoshow parameter in wp-admin/?page=cpd_metaboxes. Impact details in connected records indicate cross-site scripting without authentication and with use...
bind: Limiting simultaneous TCP clients is ineffective
A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...
May 29, 2019—KB4497935 (OS Build 18362.145)
None None...
PT-2019-11709 · Jenkins · Jenkins Static Analysis Utilities Plugin +2
Name of the Vulnerable Software and Affected Versions: Jenkins Static Analysis Utilities Plugin version 1.95 and earlier Jenkins analysis-core Plugin affected versions not specified Description: A cross-site request forgery issue exists due to the lack of permission checks and the acceptance of...
PT-2019-11719 · Jenkins · Jenkins Sitemonitor Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins SiteMonitor Plugin version 0.5 and earlier Description: The issue concerns the Jenkins SiteMonitor Plugin, which unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. This means that the plugin...
CSRF vulnerability and missing permission check allowed changing default graph configuration in analysis-core
analysis-core has the capability to allow other plugins to display trend graphs for their static analysis results. analysis-core provides the configuration form for the default settings of each graph. The configuration form and form submission handler did not perform a permission check, allowing...
DEBIAN-CVE-2019-0215
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in modssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions...
ALPINE-CVE-2019-0215
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in modssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions...
CVE-2019-0215
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in modssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions...
Design/Logic Flaw
The ETSI Enterprise Transport Security ETS, formerly known as eTLS protocol does not provide per-session forward secrecy...
CVE-2019-9191
The ETSI Enterprise Transport Security ETS, formerly known as eTLS protocol does not provide per-session forward secrecy...
PT-2019-3931 · Apache +3 · Apache Http Server +3
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.37 through 2.4.38 Description: The issue is related to a flaw in the mod ssl component of the Apache HTTP Server, specifically concerning inadequate access control. This flaw can be exploited by a remote attack...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation. The VMX code sets the GDT.LIMIT to 64 KB and does not restore it to the previous host value. This allows an attacker is able to escalate their privileges by placing malicious entries to the per-cpu variables in the GDT with a corrupted GDT limit...
The vulnerability of the per-VLAN errdisable function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.
The vulnerability of the per-VLAN errdisable function in the Cisco IOS XE operating system arises from the simultaneous execution using shared resources with incorrect synchronization “Race Condition”. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a...