[SECURITY] [DSA 4500-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4500-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 12, 2019 https://www.debian.org/security/faq -...

tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their...

Nanjing Shentu Computer Technology Co., Ltd. Valley Autumn Excellence Resource Sharing Course Software Has Multiple Vulnerabilities

Guqiu boutique resource sharing class software is a set of software customized according to the Ministry of Education about the national boutique open course construction in the boutique resource sharing class. Nanjing Shentu Computer Technology Co., Ltd. Valley Autumn fine resources sharing clas...

Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery CSRF attacks. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

Cross Origin Resource Sharing (CORS)

Firefox ESR and Firefox are vulnerable to cross origin resource sharingCORS bypass. A validation flaw in the Pocket toolbar allows a remote attacker to inject content and commands into the Pocket context enabling access to restricted resources...

Authentication Bypass

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Kentico CMS < 11.0.45 File Upload Vulnerability

Kentico CMS allows unrestricted upload of a file with a dangerous type. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Severe Flaw Disclosed In StackStorm DevOps Automation Software

A security researcher has discovered a severe vulnerability in the popular, open source event-driven platform StackStorm that could allow remote attackers to trick developers into unknowingly execute arbitrary commands on targeted services. StackStorm, aka "IFTTT for Ops," is a powerful...

Cross-origin Resource Sharing (CORS) Bypass

yiisoft/yii2 is vulnerable to cross-origin resource sharing CORS bypass. It is possible because Yii2 CORS filter exposes origin header value when the policy is configured to wildcard origins...

Cross-Origin Resource Sharing (CORS) Bypass

System.Net.Http is vulnerable to cross-origin resource sharing CORS bypass. An attacker is able to exploit the vulnerability to retrieve confidential user and system information...

Cross-origin Resource Sharing Policy Bypass

Red Hat Ceph Storage is found to be vulnerable to cross-origin resource sharing policy bypass. The vulnerability is due to the setting which allows origin on a bucket, opening up a loophole for an attacker to use malicious cross-origin HTTP request to launch denial of service...

Popular Web-Hosting Platform Bluehost Riddled with Flaws

UPDATE A researcher has uncovered several one-click client-side vulnerabilities in the popular Bluehost web hosting platform. These would allow cybercriminals to easily carry out complete account takeover, according to the analysis. Bluehost has acknowledged the issue, and told Threatpost, “We ar...

.NET Framework Information Disclosure Vulnerability

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing CORS configurations. An attacker who successfully exploited the vulnerability could retrieve content, that is normally restricted, from a web application. The securi...

KB4480962: Windows 10 January 2019 Security Update

The remote Windows host is missing security update 4480962. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

Cleartext Transmission of Sensitive Information in Apache nifi

The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...

GHSA-3JQ8-JG75-RQV6 Cleartext Transmission of Sensitive Information in Apache nifi

The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...

U.S. Dept Of Defense: [██████] Cross-origin resource sharing misconfiguration (CORS)

Hi! In this report I want to describe High level bug which can seriously compromise a user account. If I am authorize on this site, I can steal user's sessions, some personal information or do some action. Steps for reproduce 1 Send this request GET...

CVE-2018-17195

The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...

Cross site request forgery (csrf)

The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...

CVE-2018-17195

The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...