Drupal Workbench Scheduler Module Security Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security bypass vulnerability exists in the Drupal Workbench Scheduler module, which could be exploited by an attacker to bypass certain security restrictions and perfor...

IBM WebSphere Portal Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Huawei UMA Security Bypass Vulnerability

Huawei UMA Unified Maintenance and Audit is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA suffers from a security bypass vulnerability, as the program fails t...

lshell security bypass vulnerability (CNVD-2016-06705)

lshell is a set of shell commands written in Python for controlling the user's runtime environment. A security bypass vulnerability exists in lshell. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

lshell Security Bypass Vulnerability

lshell is a set of shell commands written in Python for controlling the user's runtime environment. A security bypass vulnerability exists in lshell. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Joomla! Core 'com_content' Security Bypass Vulnerability

Joomla! is an open source content management system. A security bypass vulnerability exists in Joomla! Core 'comcontent'. An attacker can exploit the vulnerability to bypass certain security restrictions...

GNU gcc Local Security Bypass Vulnerability

GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. A local security bypass vulnerability exists in GNU gcc, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

SAP HANA Security Bypass Vulnerability (CNVD-2016-06475)

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. A security bypass vulnerability exists in SAP HANA. The vulnerability allows attackers to bypass...

Doorkeeper Security Bypass Vulnerability

doorkeeper is based on the Ruby language open source Web application framework in the OAuth 2 Open Authorization Protocol provider . A security bypass vulnerability exists in Doorkeeper. The vulnerability allows attackers to bypass security restrictions and perform unauthorized actions...

ReadyDesk Security Bypass Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A security bypass vulnerability exists in ReadyDesk version 9.1, which stems from the use of hard-coded encryption for user credentials. An attacker could exploit the vulnerability to obtain a password...

IBM WebSphere Application Server Security Bypass Vulnerability (CNVD-2016-06419)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security bypass vulnerability exists in IBM WAS that...

Instacart: Brute force login and bypass locked account restrictions via iOS app

When logging in to an account on the website, a user's account gets locked out after 15 tries to prevent an attacker from brute forcing access to the account. These same restrictions do not apply to the mobile sign-in endpoint a POST request to https://www.instacart.com/oauth/token, which allows ...

FirewallD Security Bypass Vulnerability

FirewallD is a set of dynamic firewall management tools that provide support for network/firewall zones zones to define network links and interface security levels. A security bypass vulnerability exists in FirewallD. An attacker could use this vulnerability to bypass security restrictions and...

VMware Photon OS OVA Default Key Security Bypass Vulnerability

VMWare Photon OS OVA is a lightweight Linux system for running containers such as Docker from VMware. A security bypass vulnerability exists in VMware Photon OS OVA version 1.0. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Adobe Acrobat and Reader Security Bypass (APSB16-14 : CVE-2016-1040)

A remote code execution vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file...

Lepton CMS 2.2.02.2.1 - PHP Code Injection

Lepton CMS 2.2.02.2.1 - PHP Code Injection + Credits: John Page HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/LEPTON-PHP-CODE-INJECTION.txt + ISR: ApparitionSec Vendor: ================== www.lepton-cms.org Product:...

Lepton CMS 2.2.0/2.2.1 - PHP Code Injection

Credits: John Page HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/LEPTON-PHP-CODE-INJECTION.txt + ISR: ApparitionSec Vendor: ================== www.lepton-cms.org Product: ================================= Lepton CMS 2.2.0 / 2.2.1 update LEPTON...

ZModo ZP-NE14-S DVR and ZP-IBH-13W Recorder Security Bypass Vulnerability

The ZModo ZP-NE14-S DVR and the ZModo ZP-IBH-13W are both digital video recorders from ZModo China. A security bypass vulnerability exists in the ZModo ZP-NE14-S DVR and ZP-IBH-13W video recorders, which stems from the program's use of hard-code certificates. A remote attacker could exploit the...

A Shadow of our Former Self

Posted by James Forshaw of Google Project Zero “Necessity is the Mother of Invention” as it’s said, and this is no more true than when looking for and exploiting security vulnerabilities. When new exploit mitigations are introduced, either a way of bypassing the mitigation is needed or an...

ZModo ZP-NE14-S DVR and ZP-IBH-13W Cameras Security Bypass Vulnerability

The ZModo ZP-NE14-S DVR and the ZModo ZP-IBH-13W are both digital video recorders from ZModo China. A security bypass vulnerability exists in the ZModo ZP-NE14-S DVR and ZP-IBH-13W Cameras. A remote attacker could exploit the vulnerability to gain access to the device with root privileges...