CVE-2016-8743

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-en...

Samsung Devices KNOX Extensions - OTP Service Heap Overflow

Samsung Devices KNOX Extensions - OTP Service Heap Overflow / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=935 As a part of the KNOX extensions available on Samsung devices, Samsung provides a new service which allows the generation of OTP tokens. The tokens themselves are...

OWOX, Inc.: Access to Grafana Dashboard

Hi, I was looking at the office.owox.com on port 3000 Grafana webapp. I'm not sure if it is for demo purposes, but I can access the main dashboard and view all graphs. I am also able to sign in and create my own organizations, dashboards etc. I searched on the net for any reference to this web...

SuperFish Vulnerability

Lenovo Security Advisory: LEN-2015-010 Potential Impact: Man-in-the-Middle Attack Severity: High Summary: This advisory only applies to Lenovo Notebook products. ThinkPad, ThinkCentre, Lenovo Desktop, ThinkStation, ThinkServer and System x products are not impacted. SuperFish was previously...

SuperFish Vulnerability - Lenovo Support US

No description provided...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

Exploit for windows platform in category local exploits ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/...

HackerOne: AWS S3 bucket writeable for authenticated aws users

Hi All, I know that hackerone-attachments is used for file uploads on reports and so I did a quick scan for similar buckets and found . While I can't confirm if you own it or not, it appears that it is publicly writable using the aws cli. When I tried to write to hackerone-attachments, I get: "mo...

Apache Httpd < 2.2.32 : Apache HTTP Request Parsing Whitespace Defects

Apache HTTP Server, prior to release 2.4.25 and 2.2.32, accepted a broad pattern of unusual whitespace patterns from the user-agent, including bare CR, FF, VTAB in parsing the request line and request header lines, as well as HTAB in parsing the request line. Any bare CR present in request lines...

Apache Httpd < 2.4.25 : Apache HTTP Request Parsing Whitespace Defects

Apache HTTP Server, prior to release 2.4.25 and 2.2.32, accepted a broad pattern of unusual whitespace patterns from the user-agent, including bare CR, FF, VTAB in parsing the request line and request header lines, as well as HTAB in parsing the request line. Any bare CR present in request lines...

X (Formerly Twitter): Insufficient OAuth callback validation which leads to Periscope account takeover

Hi, I would like to report an issue in the Periscope Twitter application which allows attacker to circumvent the callback locking to takeover victim's Periscope account which is connected to a Twitter account. Detail In the mobile Periscope app, the consumerkey and consumersecret for Twitter...

FTPShell Client 5.24 - Buffer Overflow

Exploit for windows platform in category local exploits ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTPSHELL-v5.24-BUFFER-OVERFLOW.txt Vendor: ================================ www.ftpshell.com Product:...

Microsoft 'Accidentally' pushed 'Test patch' Update to All Windows 7 Users

A highly mysterious update that was pushed out to Windows machines globally was the result of a test that was not correctly implemented. Yes, Microsoft accidentally released a test patch KB3877432 to consumer machines running Windows 7, making users believe that the Windows Update service got...

Cisco AnyConnect Secure Mobility Client 3.1.08009 - Local Privilege Escalation

Cisco AnyConnect Secure Mobility Client 3.1.08009 - Local Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=460 Cisco AnyConnect Secure Mobility Client v3.1.08009 Elevation of Privilege Platform: Windows 8.1 Update, Client version 3.1.08009 tested on...

London Railway System Passwords Exposed During TV Documentary

The Weakest Link In the Information Security Chain is still – Humans. And this news has ability to prove this fact Right. One of London's busiest railway stations has unwittingly exposed their system credentials during a BBC documentary. The sensitive credentials printed and attached to the top o...

Slack: Team admin can change unauthorized team setting (require_at_for_mention)

Team admin can escalate his privileges and change 'requireatformention' team setting, which can be changed only by a team owner. Steps to reproduce: 1. Log in as team admin 2. Send the below request using his token and notice that it changes 'requireatformention' setting to true. POST...

China merchants Bank online banking orientation xss through kill web, PC client and mobile APP can be directed to steal information phishing stallion-the vulnerability warning-the black bar safety net

Brief description: China merchants Bank online banking somewhere storage typexss, the web version, PC client, mobile client are affected. Not dare to use online banking.. Detailed description: The following is the client doing the test China merchants Bank online banking self-service transfer...

Square: Editing Client Details of other People

Hi there, I have found out that there is no "authorization" in which prohibits a user to modify client's data of other users. As per sample I have two2 accounts: One freebie account and One subscribed account Monthly The freebie account has a Client with ID : f42b88d1af62f0a9d240024e83690174. Tha...

BS.Player 2.51 - '.mp3' File Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38568/info BS.Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of th...

Snes9x 1.3 - Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3437/info Snes9x is a free Super Nintendo emulator that runs on a number of platforms. Snes9x is prone to a buffer overflow. This is due to improper bounds checking of rom names. In this case, 4089 characters are required...

W1L3D4 WEBmarket 0.1 - Remote SQL Injection Vulnerability

No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : W1L3D4 WEBmarket v0,1 SQL Injection Vuln Author : CrackersChild Contact : [email protected] Bug : in urunbak.asp Do...