Microsoft Windows Security Feature CVE-2018-8549 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Vignette Content Management 6 Security Bypass Vulnerability

Exploit for php platform in category web applications 0day.today 2018-11-12...

Brocade Fabric OS Security Bypass Vulnerability (CNVD-2018-23084)

Brocade Fabric OS FOS is an embedded operating system used in devices such as switches and routers from Brocade Communications Systems Brocade. command line interface CLI is one of the command line interfaces. A security vulnerability exists in the 'supportsave' command in the Brocade FOS CLI. A...

Brocade Fabric OS Security Bypass Vulnerability

Brocade Fabric OS FOS is an embedded operating system used in devices such as switches and routers from Brocade Communications Systems Brocade. command line interface CLI is one of the command line interfaces. A security vulnerability exists in the 'firmwaredownload' command in the Brocade FOS CL...

Vignette Content Management 6 Security Bypass

...

Invisi-Shell - Hide Your Powershell Script In Plain Sight (Bypass All Powershell Security Features)

Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features ScriptBlock logging, Module logging, Transcription, AMSI by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress This is still a preliminary version intended as a...

CVE-2016-9749

IBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an authenticated user with access to the local network to bypass security due to lack of input validation. IBM X-Force ID: 120206...

KLA11348 Out of bounds memory access vulnerability in Google Chrome

Out of bounds memory access vulnerability in Google Chrome can be exploited remotely via specially designed website to bypass security restrictions. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2018-17478 high Solution Update to the latest...

KLA11347 SB vulnerability in PostgreSQL

SQL injection vulnerability in PostreSQL. Malicious users can exploit this vulnerability via running arbitrary SQL statements with superuser privileges when a superuser runs pgupgrade on the database or during a pgdump dump/restore cycle to bypass security restrictions. Original advisories...

HPE Integrated Lights-Out 5 Security Restriction Bypass Vulnerability

HPE Integrated Lights-Out 5 iLO 5 is a remote control solution. The solution enables remote monitoring and operation and maintenance of IT assets such as servers. A security restriction bypass vulnerability exists in HPE iLO 5 versions prior to 1.37. An attacker could exploit this vulnerability t...

IBM Contact Optimization Input Validation Vulnerability

IBM Contact Optimization is a suite of marketing management solutions from IBM USA. The product is used to increase customer engagement and supports features such as creating rule-based scores. An input validation vulnerability exists in IBM Contact Optimization that stems from a lack of input...

WordPress 4.6.x < 4.6.2 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

WordPress 4.0.x < 4.0.14 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

WordPress 3.9.x < 3.9.15 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

Joomla! 3.2.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...

Joomla! 3.0.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...

Drupal 8.3.x < 8.3.0-rc2 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the editor module due to a failure to properly check access restrictions when adding private files with a configured text editor e.g...

Joomla! 1.7.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...

WordPress 4.3.x < 4.3.7 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

WordPress 3.7.x < 3.7.17 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...