Insufficient access control in the export functionality for the 'Groups' module exposing user password hashes

Description The web application incorrectly returns sensitive data to authenticated lower privileged users when making requests to export data from the 'Groups' module. This includes information such as the user's email address, password hash and whether two-factor authentication is configured...

Microsoft Windows Arbitrary Code Execution Vulnerability (CNVD-2016-00253)

Microsoft Windows is a popular operating system. Microsoft Windows contains a security vulnerability in Win32k, which can be exploited by remote attackers to execute arbitrary code by submitting a special request...

[SA18738] IBM Lotus Domino LDAP Server Denial of Service Vulnerability

TITLE: IBM Lotus Domino LDAP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18738 VERIFY ADVISORY: http://secunia.com/advisories/18738/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: IBM Lotus Domino 7.x http://secunia.com/product/5746/ DESCRIPTION: Evgeny...