CVE-2018-1195: Cloud Controller API will accept a refresh token for authentication | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using Cloud Controller version prior to 1.46.0 You are using cf-deployment version prior to 1.3.0 You are using cf-release version prior to 283 Description Cloud Controller accepts refresh tokens fo...

Elastic Kibana Reporting plugin 'CVE-2016-1000218' CSRF Vulnerability

Version 2.4.0 of the Reporting plugin for Elastic Kibana is vulnerable to a CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ai7412tr6555.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-569354 Description| Value ---|--- Affected Website:| ai7412tr6555.godo.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Arbitrary File Read Vulnerability in FineReport Version 8.0

FineReport reporting software is a pure Java written , data display reports and data entry forms functions in one enterprise-class web reporting tools . FineReport 8.0 version of the existence of arbitrary file read vulnerability, an attacker can be exploited to read any file on the site...

nsaohio.com XSS vulnerability

Open Bug Bounty ID: OBB-568070 Description| Value ---|--- Affected Website:| nsaohio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www-hermes.desy.de XSS vulnerability

Open Bug Bounty ID: OBB-567752 Description| Value ---|--- Affected Website:| www-hermes.desy.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

photonews.photogenius.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-562467 Description| Value ---|--- Affected Website:| photonews.photogenius.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

wihg.res.in XSS vulnerability

Open Bug Bounty ID: OBB-562153 Description| Value ---|--- Affected Website:| wihg.res.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ngadimin.com XSS vulnerability

Open Bug Bounty ID: OBB-561169 Description| Value ---|--- Affected Website:| ngadimin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ABRT - raceabrt Privilege Escalation Exploit

Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ABRT raceabrt Privilege Escalation', 'Description' = %q This module attempts to gain root...

colleo.fr XSS vulnerability

Open Bug Bounty ID: OBB-560496 Description| Value ---|--- Affected Website:| colleo.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

radiumvalleyvacationresort.com XSS vulnerability

Open Bug Bounty ID: OBB-560206 Description| Value ---|--- Affected Website:| radiumvalleyvacationresort.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cgifrankfurt.de XSS vulnerability

Open Bug Bounty ID: OBB-558619 Description| Value ---|--- Affected Website:| cgifrankfurt.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ske-reisen.de XSS vulnerability

Open Bug Bounty ID: OBB-558393 Description| Value ---|--- Affected Website:| ske-reisen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Turns out Equifax breach was way bigger than initially thought

By Carolina On July 29th Equifax, a consumer credit reporting agency in the United This is a post from HackRead.com Read the original post: Turns out Equifax breach was way bigger than initially thought...

Security feature bypass

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment...

CVE-2015-1862

CVE-2015-1862 describes a local privilege-escalation in ABRT’s crash reporting. The vulnerability arises when ABRT’s crash-handler code performs an execve after a chroot into a user-specified directory within a named-space; a race condition/symlink handling flaw can allow a local user to influenc...

CVE-2015-1862

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment...

RHEL 6 / 7 : Red Hat Satellite 6 (RHSA-2018:0273)

An update is now available for Red Hat Satellite 6.2 for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

A Look Back: Reviewing the Worst Cyber Attacks of 2017 and the Lessons Learned

It seems that each year that passes is worse than the last in terms of hacking and cyber attacks, and 2017 was no exception. "Surprising no one, 2017 was marked another 'worst year ever' in data breaches and cyber incidents around the world," said Jeff Wilbur, director of the Internet Society's...