4408 matches found
mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute
It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash...
CVE-2016-7572
The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors...
CVE-2016-7572
The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors...
Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...
ownCloud Local File Inclusion Vulnerability (Sep 2016) - Windows
ownCloud is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...
Drupal Core Full config export configuration file unauthorized download vulnerability
Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...
Cisco IOS XR NCS 6000 Packet Timer Leak DoS (cisco-sa-20160713-ncs6k)
The version of Cisco IOS XR running on the remote NCS 6000 device is affected by a denial of service vulnerability due to improper management of system timer resources. An unauthenticated, remote attacker can exploit this, via numerous management connections to the affected device, to consume...
[SECURITY] [DSA 3654-1] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3654-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3654-1 (quagga - security update)
Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. CVE-2016-4036 Tams Nmeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handling man...
Debian DSA-3654-1 : quagga - security update
Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. - CVE-2016-4036 Tamas Nemeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. - CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handli...
Route Validation Bypass
Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...
Pornhub: XSS ReflectedGET /*embed_player*?
The researcher discovered a reflected XSS in the embedplayer route...
Voyager: Route Planner - External URLs, MIT license, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Voyager: Route Planner published at the 'play' market has multiple vulnerabilities...
GPS Route Finder Maps - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application GPS Route Finder Maps published at the 'play' market has multiple vulnerabilities...
Map and Route - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Map and Route published at the 'play' market has multiple vulnerabilities...
GPS Driving Route - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GPS Driving Route published at the 'play' market has multiple vulnerabilities...
Driving Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Driving Route Finder published at the 'play' market has multiple vulnerabilities...
ROUTE 66 Navigate - WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application ROUTE 66 Navigate published at the 'play' market has multiple vulnerabilities...
Falk Maps & Route Planner - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Falk Maps & Route Planner published at the 'play' market has multiple vulnerabilities...
Munich Metro MVG Map & Route - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Munich Metro MVG Map & Route published at the 'play' market has multiple vulnerabilities...