Huawei Campus S7700/S9300/S9700 Switches Security Bypass Vulnerability

Huawei Campus S7700 and others are enterprise campus switches from Huawei China. A security vulnerability exists in Huawei Campus S7700, S9300, and S9700 switches. An attacker can exploit the vulnerability to upgrade the software, bypass the system security checking mechanism, and compromise the...

IBM WebSphere Portal Access Control Bypass Vulnerability (swg22000152)

IBM Websphere Portal is prone to access control bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Golang Go SSH Library Security Bypass Vulnerability

Golang Go is a programming language optimized for programming applications on multiprocessor systems. A security bypass vulnerability exists in the Golang Go SSH Library. An attacker can exploit this vulnerability to perform a man-in-the-middle attack or emulate a trusted server...

MyBB Server-Side Request Forgery Security Bypass Vulnerability

MyBB is a popular forum program. MyBB suffers from a server-side request forgery security bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized operations...

PHP Server Side Request Forgery Security Bypass Vulnerability（CVE-2017-7272）

For historical reasons, fsockopen accepts the port and hostname separately: fsockopen'127.0.0.1', 80 However, with the introdcution of stream transports in PHP 4.3, it became possible to include the port in the hostname specifier: fsockopen'127.0.0.1:80' Or more formally:...

Apple macOS Sierra MCX Client Security Bypass Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.MCX Client is one of the management clients. A security bypass vulnerability exists in the MCX Client component of Apple macOS Sierra versions prior to 10.12.4. A remote attacker could exploit this...

ProFTPD < 1.3.5e, 1.3.6 < 1.3.6rc5 Local Security Bypass Vulnerability

ProFTPD server is prone to local security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd";...

Red Hat Keycloak Security Bypass Vulnerability

keycloak is the United States Red Hat Red Hat company's set of open source for modern applications and services for identity and access management software . A security bypass vulnerability exists in Red Hat Keycloak. An attacker could use this vulnerability to bypass security restrictions and...

Design/Logic Flaw

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass th...

CVE-2017-7418

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass th...

CVE-2017-7418

ProFTPD vulnerable: versions 1.3.5e and 1.3.6 before 1.3.6rc5 improperly enforce AllowChrootSymlinks by checking only the last path component, allowing local attackers to bypass symlink restrictions when reconfiguring a user’s home directory. The issue is fixed in later releases (notably upstream...

Apache Tomcat 6789 - Information Disclosure

Apache Tomcat 6789 - Information Disclosure Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability Date: 4th March 2017 Exploit Author: justpentest Vendor Homepage: tomcat.apache.org Version: Apache Tomcat 9.0.0.M1 through 9.0.0.M11, 8.5.0 through 8.5.6, 8.0.0.RC1 through 8.0.38,...

Apache Tomcat 6 / 7 / 8 / 9 Information Disclosure

Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability Date: 4th March 2017 Exploit Author: justpentest Vendor Homepage: tomcat.apache.org Version: Apache Tomcat 9.0.0.M1 through 9.0.0.M11, 8.5.0 through 8.5.6, 8.0.0.RC1 through 8.0.38, 7.0.0 through 7.0.72 and 6.0.0 through 6.0....

Apache Tomcat 6/7/8/9 - Information Disclosure

Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability Date: 4th March 2017 Exploit Author: justpentest Vendor Homepage: tomcat.apache.org Version: Apache Tomcat 9.0.0.M1 through 9.0.0.M11, 8.5.0 through 8.5.6, 8.0.0.RC1 through 8.0.38, 7.0.0 through 7.0.72 and 6.0.0 through 6.0....

Apache Tomcat 6/7/8/9 - Information Disclosure Vulnerability

Exploit for multiple platform in category remote exploits Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability Date: 4th March 2017 Exploit Author: justpentest Vendor Homepage: tomcat.apache.org Version: Apache Tomcat 9.0.0.M1 through 9.0.0.M11, 8.5.0 through 8.5.6, 8.0.0.RC1...

macOS : Apple Safari < 10.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read error exists in WebKit when handling certain JavaScript code. An unauthenticated, remote attacker can exploit this to cause ...

Pixie 1.0.4 - Arbitrary File Upload

Exploit Title: File Extension Filter Bypass in File Manager Pixie 1.0.4 With Low Privilege Google Dork: no Date: 02-April-2017 Exploit Author: @runggareksya, @dvnrcy, @dickysofficial Vendor Homepage: http://www.getpixie.co.uk Software Link:...

Multiple Vulnerabilities in Google Chrome and Chrome OS

Google Chrome and Chrome OS are both products of Google Inc. Google Chrome is a Web browser.Google Chrome OS is a fast, lightweight, open source Web-based operating system. Multiple vulnerabilities exist in Google Chrome versions prior to 57.0.2987.133 and Chrome OS versions prior to 57.0.2987.13...

CVE-2016-8032

The CVE-2016-8032 entry concerns Intel Security Anti-Virus Engine (AVE) versions 5200–5800. According to the provided documents, a vulnerability in AVE allows a local attacker to bypass local security protections by supplying a crafted input file. The impact described is bypass of security protec...

Zulip Server Security Bypass Vulnerability

Zulip Server is a set of open source group chat application written in Python based on the Django framework . A security vulnerability exists in the implementation of the autosubscribe feature of the checkstreamexists route in versions of Zulip Server prior to 1.4.3. An attacker can exploit this...