Ubiquiti Inc.: Bypass blocked profile protection on aircrm.ubnt.com

The researcher discovered a bypass in the "block profile publication" feature...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2018-4110

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Web App" component. It allows remote attackers to bypass intended restrictions on cookie persistence...

Apache HTTP Server Remote Security Bypass Vulnerability

Apache HTTP Server is an open source web server from the Apache Software Foundation. A security bypass vulnerability exists in Apache httpd versions 2.2.0 through 2.4.29, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations via trailing newline...

Parameter overflow vulnerability in OpenResty uri

OpenResty® is a high-performance web platform based on Nginx and Lua, with a large number of well-integrated Lua libraries, third-party modules, and most dependencies. A parameter overflow vulnerability exists in OpenResty uri. The vulnerability stems from the program's inability to properly fetc...

rap2hpoutre Laravel Log Viewer Security Bypass Vulnerability

rap2hpoutre Laravel Log Viewer is a log viewer for the Laravel development framework. A security vulnerability exists in rap2hpoutre Laravel Log Viewer prior to version 0.13.0. A remote attacker can exploit this vulnerability to bypass access restrictions...

Jenkins Mercurial Plugin Security Bypass Vulnerability

Jenkins is an open source software project , is based on Java development of a continuous integration tool . A security vulnerability exists in the MercurialStatus.java file in Jenkins Mercurial Plugin 2.2 and earlier versions. An attacker can exploit the vulnerability to obtain a list of nodes a...

KLA11229 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A buffer overflow vulnerability can be exploited remotely...

Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass Explo

Exploit for hardware platform in category web applications Exploit Title: Hikvision IP Camera versions 5.2.0 - 5.3.9 Builds: 140721 - 170109 Backdoor Date: 15-03-2018 Vendor Homepage: http://www.hikvision.com/en/ Exploit Author: Matamorphosis Category: Web Apps Description: Exploits a backdoor in...

Microsoft Office 2016 Click-to-Run (C2R) Security Bypass Vulnerability (Mar 2018)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Shibboleth XMLTooling-C Library < 1.6.4 Security Bypass Vulnerability

Shibboleth Service Provider is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA12361 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in modcachesocache...

JabberD 2.x: Multiple vulnerabilities

Background JabberD 2.x is an open source Jabber server written in C. Description Multiple vulnerabilities have been discovered in Gentoo’s JabberD 2.x ebuild. Please review the referenced CVE identifiers for details. Impact An attacker could possibly escalate privileges by owning system binaries ...

GLSA-201803-07 : JabberD 2.x: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-07 JabberD 2.x: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Gentoos JabberD 2.x ebuild. Please review the referenced CVE identifiers for details. Impact : An attacker could possibly escalate...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

CVE-2018-8768

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous...

KLA11594 SB vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds memory write vulnerability in libvorbis can be exploited to bypass security restrictions; 2. Out...

Microsoft Windows Scripting Host Security Bypass Vulnerability (CNVD-2018-05833)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows Scripting Host WSH is one of the scripting environments embedded in the system. A security bypass vulnerability exists in Microsoft WSH. An attacker can exploit this vulnerabili...

Microsoft Cryptography Next Generation Security Bypass Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Cryptography Next Generation CNG is one of the cryptographic platforms. cng.sys driver is one of the drivers. A security bypass vulnerability exists in the cng.sys driver in Microsoft C...

KLA11595 SB vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds memory write vulnerability in libvorbis can be exploited to bypass security restrictions; 2...