WinAPI User Hunter: hunter

WinAPI User Hunter During Red Team engagements it is common to track/hunt specific users. Assuming we already have access to a desktop as a normal user no matter how, always “assume compromise” in a Windows Domain and we want to spread laterally. We want to know where the user is logged on, if he...

Apple OS X Server Information Disclosure And Security Bypass Vulnerabilities

Apple OS X Server is prone to information disclosure and security bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Security Updates (stable-channel-update-for-desktop-2016-12) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Smiths-Medical CADD-Solis Medication Safety Software Security Bypass Vulnerability

Smiths-Medical, headquartered in Plymouth, Minnesota, is a subsidiary of Smiths Group, a company based in the U.K. CADD-Solis drug safety software, is an application used to set dose limits for infusion pumps. A security bypass vulnerability exists in Smiths-Medical CADD-Solis Medication Safety...

Symantec Norton App Lock Local Security Bypass Vulnerability

Norton App Lock is a series of security products under Symantec. A local security bypass vulnerability exists in Symantec Norton App Lock. A local attacker could use this issue to bypass certain security restrictions in order to perform unauthorized operations. This could facilitate further attac...

Mozilla Firefox < 50.0 Multiple Vulnerabilities

Binary data 9804.prm...

phpMyAdmin security bypass vulnerability (CNVD-2016-11857)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

phpMyAdmin Security Bypass Vulnerability (CNVD-2016-11853)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

phpMyAdmin security bypass vulnerability (CNVD-2016-11854)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

Google Chrome < 55.0.2883.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 55.0.2883.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201612stable-channel-update-for-desktop advisory. - Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...

phpMyAdmin security bypass vulnerability (CNVD-2016-11855)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

Apple macOS Security Bypass Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security bypass vulnerability exists in Apple macOS. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Google Chrome < 55.0.2883.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 55.0.2883.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201612stable-channel-update-for-desktop advisory. - Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...

CVE-2016-9752

Serendipity (PHP weblog engine) is affected by CVE-2016-9752 in versions before 2.0.5, where an attacker can bypass SSRF protection by supplying a malformed IP address (for example, http://127.1) or triggering a 30x redirect. The vulnerability enables bypass of server-side request forgery protect...

Apple Safari Multiple Vulnerabilities (Dec 2016) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

SIEMENS SICAM PAS Local Security Bypass Vulnerability

SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. A local security bypass vulnerability exists in SIEMENS SICAM PAS. An authenticated local attacker...

Cisco ATA 187 Analog Telephone Adapter Unauthorized Access Security Bypass Vulnerability (cisco-sa-20130206-ata187)

Cisco ATA-187 is prone to a security bypass vulnerability because it allows attackers to gain unauthorized access to the device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fortinet FortiOS 5.x < 5.4.2 Flow-mode Detection Bypass

The remote FortiGate device is running a version of FortiOS that is 5.x prior to 5.4.2. It is, therefore, affected by a security bypass vulnerability when reloading the scanning engine after an update that results in active network sessions no longer being monitored by flow-mode detection. An...

Fortinet FortiOS Security Bypass Vulnerability (CNVD-2016-11690)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security bypas...

Multiple Security Bypass Vulnerabilities in CakePHP

CakePHP is the United States Cake Software Foundation of a MVC-based architecture , open source Web development framework. The framework has a flexible view caching , automatic generation of CRUD code and other features . CakePHP has multiple security bypass vulnerabilities that can be exploited ...