26 matches found
CVE-2020-5275: Improper Authorization
In symfony/security-http before versions 4.4.7 and 5.0.7, when a Firewall checks access control rule, it iterate overs each rule's attributes and stops as soon as the accessDecisionManager decides to grant access on the attribute, preventing the check of next attributes that should have been take...
The vulnerability in the security.http.utils component of the Symfony software development and web application management platform allows attackers to carry out phishing attacks and gain access to protected information.
The vulnerability of the security.http.utils component of the Symfony software development and management platform involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows attackers to conduct phishing attacks remotely and gain access to protected information using...
Fedora 28 : php-symfony4 (2018-6edf04d9d6)
Version 4.0.15 2018-12-06 - security CVE-2018-19790 Security\Http detect bad redirect targets using backslashes @xabbuh - security CVE-2018-19789 Form Filter file uploads out of regular form types @nicolas-grekas Note that Tenable Network Security has extracted the preceding description block...
Fedora 29 : php-symfony (2018-b38a4dd0c7)
Version 2.8.49 2018-12-06 - security CVE-2018-19790 Security\Http detect bad redirect targets using backslashes @xabbuh - security CVE-2018-19789 Form Filter file uploads out of regular form types @nicolas-grekas Note that Tenable Network Security has extracted the preceding description block...
Android Package Inspector: Inspeckage
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...
