Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...

ownCloud Local File Inclusion Vulnerability (Sep 2016) - Windows

ownCloud is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

Drupal Core Full config export configuration file unauthorized download vulnerability

Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...

Cisco IOS XR NCS 6000 Packet Timer Leak DoS (cisco-sa-20160713-ncs6k)

The version of Cisco IOS XR running on the remote NCS 6000 device is affected by a denial of service vulnerability due to improper management of system timer resources. An unauthenticated, remote attacker can exploit this, via numerous management connections to the affected device, to consume...

[SECURITY] [DSA 3654-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3654-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3654-1 (quagga - security update)

Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. CVE-2016-4036 Tams Nmeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handling man...

Debian DSA-3654-1 : quagga - security update

Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. - CVE-2016-4036 Tamas Nemeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. - CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handli...

Route Validation Bypass

Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...

Pornhub: XSS ReflectedGET /*embed_player*?

The researcher discovered a reflected XSS in the embedplayer route...

Voyager: Route Planner - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Voyager: Route Planner published at the 'play' market has multiple vulnerabilities...

GPS Route Finder Maps - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application GPS Route Finder Maps published at the 'play' market has multiple vulnerabilities...

Map and Route - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Map and Route published at the 'play' market has multiple vulnerabilities...

GPS Driving Route - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GPS Driving Route published at the 'play' market has multiple vulnerabilities...

Driving Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Driving Route Finder published at the 'play' market has multiple vulnerabilities...

ROUTE 66 Navigate - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ROUTE 66 Navigate published at the 'play' market has multiple vulnerabilities...

Falk Maps & Route Planner - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Falk Maps & Route Planner published at the 'play' market has multiple vulnerabilities...

Munich Metro MVG Map & Route - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Munich Metro MVG Map & Route published at the 'play' market has multiple vulnerabilities...

Sales Rep Route Planner - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sales Rep Route Planner published at the 'play' market has multiple vulnerabilities...

GPS Route Finder - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GPS Route Finder published at the 'play' market has multiple vulnerabilities...

GPS Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GPS Route Finder published at the 'play' market has multiple vulnerabilities...