rars-msp.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1160468 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

razorCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-26701)

razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. A cross-site request forgery vulnerability exists in the rars/user/data page in razorCMS version 3.4.8. A remote attacker can exploit this...

Cross site request forgery (csrf)

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user...

CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user...

PT-2018-14315

Name of the Vulnerable Software and Affected Versions razorCMS version 3.4.8 Description The issue allows for a CSRF attack, enabling an attacker to change the password of an admin user by manipulating the rars/user/data endpoint. Recommendations For razorCMS version 3.4.8, consider implementing...

CVE-2011-0444

Buffer overflow in the MAC-LTE dissector epan/dissectors/packet-mac-lte.c in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of RARs...

DEBIAN-CVE-2011-0444

Buffer overflow in the MAC-LTE dissector epan/dissectors/packet-mac-lte.c in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of RARs...

CVE-2011-0444

Buffer overflow in the MAC-LTE dissector epan/dissectors/packet-mac-lte.c in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of RARs...

CVE-2011-0444

Buffer overflow in the MAC-LTE dissector epan/dissectors/packet-mac-lte.c in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of RARs...