Google Chrome MathML Incorrect Escape Vulnerability

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 67.0.3396.62, which stems from the program's...

Bitvise SSH Server < 7.41 Security Bypass Vulnerability

Bitvise SSH Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:bitvise:winsshd";...

[SECURITY] [DSA 4216-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4216-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2018 https://www.debian.org/security/faq -...

F5 BIG-IP Security Restriction Bypass Vulnerability

F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A security restriction bypass vulnerability exists in F5 BIG-IP 11.x, 12.x, and 13.x. A remote attacker could exploit this vulnerability to run commands in the Traffic...

Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)

A security policy bypass vulnerability exists in Apache httpd. A remote attacker can exploit this vulnerability by sending a HTTP request with crafted URI to the remote HTTP server. Successful exploitation could result security policy bypass and arbitrary file upload...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

Trihedral Engineering Limited VTScada ICSA-17-304-0 has multiple vulnerabilities

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. Trihedral Engineering Limited VTScada has multiple vulnerabilities. An attacker could execute arbitrary script code in the affected application or...

Unspecified Security Bypass Vulnerability in SAP Management Console

SAP Management Console is a management console for SAP products. An unspecified security bypass vulnerability exists in SAP Management Console. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized actions, resulting in further attacks...

SAP NetWeaver AS Java Log Injection Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform, the platform can provide the development and operation environment for SAP applications. SAP NetWeaver AS Application Server Java is a run in NetWeaver and based on the Java programming language...

Tor: Tor Browser: iframe with `data:` uri has access to parent window

Version: 7.5.4 based on Mozilla Firefox 52.8.0 Tested with standard security slider. However, it's likely to be possible with a higher security level. Summary In Tor Browser iframe with data:uri inherits the origin of parent window. That leads to iframe has access to parent window. PoC Iframe cou...

Adobe Acrobat and Reader Client Side Request Injection (APSB18-09: CVE-2018-4995)

A Security Bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

IBM StoredIQ Elevation of Privilege Vulnerability

IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. A security vulnerability exists in IBM StoredIQ version 7....

Easy File Uploader 1.7 Shell Upload

==================================================================================================================================== | Title : Easy File Uploader 1.7 unrestricted file upload Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro...

Authentication flaw

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...

CVE-2018-1193

Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections...

Linux kernel driver safety bypass vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. kernel drivers are one of the kernel drivers. A security vulnerability in the implementation of random seed numbers in versions of the Linux kernel driver prior to...

Oracle Java SE 'jarsigner' Security Bypass Vulnerability - Linux

Oracle Java SE is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Tomcat CORS Filter Security Bypass Vulnerability

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems.CORS Filter is one of the components to provide...

Oracle Java SE 'jarsigner' Security Bypass Vulnerability - Windows

Oracle Java SE is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...

GLSA-201805-09 : Shadow: security bypass

The remote host is affected by the vulnerability described in GLSA-201805-09 Shadow: security bypass A local attacker could possibly bypass security restrictions if an administrator used group blacklisting to restrict access to file system paths. Impact : A local attacker could possibly bypass...