Integer overflow

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an...

Security Advisory - Six Vulnerabilities in Some Huawei Products

There are two out-of-bounds read vulnerability in some Huawei products. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a process...

Debian: Security Advisory (DLA-933-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Friend's Home App Has Logic Design Flaws

Friends Home App is a social B&B platform based on acquaintance relationship. There is a logical design vulnerability in the Friend's Home APP, which can be exploited by an attacker to register arbitrary accounts and reset account passwords, leading to account abuse and consumption of service...

Shanghai HOLLOW Investment Management Co., Ltd APP - HOLLOW Financial has arbitrary number login vulnerability

HOLLOW FINANCE APP is an investment and financing mobile app. Shanghai HaoLu Investment Management Co. HaoLu Financial APP has an arbitrary number login vulnerability, the vulnerability is due to the program failed to limit the number of times the verification code is sent and the valid time. An...

Tripwire IP360 VnE Manager Security Bypass Vulnerability

The Tripwire formerly known as nCircle IP360 VnE Manager is an IT asset management appliance from Tripwire USA. A security vulnerability exists in the RPC service in Tripwire IP360 VnE Manager version 7.2.2 prior to 7.2.6. A remote attacker can exploit the vulnerability with the help of specially...

Multiple Vulnerabilities in the EnjoyShop App

Enjoy a purchase app is an online shopping application. There are vulnerabilities in arbitrary user password change, arbitrary account login, arbitrary user payment password reset and payment design of Enjoy a purchase app. An attacker can reset any user, login to any account, reset any payment...

Information Leakage Vulnerability in CTG's EZH Mobile APP

EZHI Mobile AP is a one-stop human resources services handheld application platform, covering personnel services, health management, flexible benefits and other business areas, providing online human resources services for registered users and the employees they serve. There is an information...

Logic design flaws in the Journey Dot Dot Dot app

Journey dot app is a train travel service software. A logical design vulnerability exists in the JourneyPoint app. An attacker can register any account, reset any password and perform unauthorized operations by capturing packets and blasting CAPTCHA...

Wheeling Self-Driving Android App is vulnerable to arbitrary account password resets

Wheel Self-Driving APP is a self-driving comprehensive service center software. The Rolling Self-Driving Android APP is vulnerable to arbitrary account password reset vulnerability. It allows an attacker to reset any registered account password by means of CAPTCHA blasting...

Brush Bracelet App Has Design Logic Flaws

The Brush Bracelet app is a smart wearable device app. There is a design logic vulnerability in Brush Bracelet app. An attacker can exploit the vulnerability to perform arbitrary user registration and arbitrary password reset operations...

Walker Live app has a logic design flaw

Walker Live app is a video and audio playback software. There is a logic design vulnerability in the Walker Live app. Attackers can use the vulnerability to perform arbitrary user registration, arbitrary password reset operations...

Microsoft Azure Active Directory Connect Remote Elevation of Privilege Vulnerability

Microsoft Azure Active Directory Connect is a service from Microsoft that provides identity and access management in the cloud. A privilege-lifting vulnerability exists in Microsoft Azure Active Directory Connect versions prior to 1.1.553.0. An attacker could exploit the vulnerability to reset...

Password Resets Across Zones

cloudfoundry-identity-server is vulnerable to unauthorized password resets. Privileged users in one zone are able to reset passwords for users in a separate zone...

Nexus 9 vs. Malicious Headphones, Take Two

Nexus 9 vs. Malicious Headphones, Take Two In March 2017 we disclosed CVE-2017-0510, a critical vulnerability in Nexus 9, that allowed for quite unique an attack by malicious headphones. Interestingly, its patch was insufficient. We had responsibly reported that finding CVE-2017-0648 to Google,...

FreeBSD : roundcube -- arbitrary password resets (bce47c89-4d3f-11e7-8080-a4badb2f4699)

Roundcube reports : Roundcube Webmail allows arbitrary password resets by authenticated users. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

[SECURITY] [DSA 3870-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3870-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3870-1 (wordpress - security update)

Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to force password resets, and perform various cross-site scripting and cross-site request forgery attacks. OpenVAS Vulnerability Test $Id: deb3870.nasl 6607 2017-07-07 12:04:25Z cfischer $...

Debian DSA-3870-1 : wordpress - security update

Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to force password resets, and perform various cross-site scripting and cross-site request forgery attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian: Security Advisory (DSA-3870-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...