Weblate: Improper validation of unicode characters

There are validation issues server side causing a server error when saving the account. Please specify what characters are permited...

Gratipay: Transferring incorrect data to the http://gip.rocks/v1 endpoint with correct Content-Type leads to local paths disclosure through the error message

Description Hi. I found the way to raise 500 Internal Server Error with some sensitive information disclosure some local paths of the python installation. The issue is not critical, however, you can prevent this information leak. Request: POST /v1 HTTP/1.1 Host: gip.rocks Cache-Control: max-age=0...

The remote server returned an error: (500) Internal Server Error

If you see "The remote server returned an error: 500 Internal Server Error" in any of the Unidesk failure messages, it means there is a problem with an ESX host. Keep in mind that vSphere will route filesystem requests to any available ESX host that has the requested VMFS mounted, including ones...

CVE-2017-3318

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

CVE-2017-3318: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2017-00989)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A local vulnerability exists in Oracle MySQL Server. An attacker can exploit the vulnerability to compromise th...

Starbucks: Starbucks.com is reachable via ip address thus possible to link any doamin to Starbucks.

It is possible for anybody to buy a domain name containing negative terms and point it to someone's website in order to damage their reputation. For instance someone could buy the domain child-pornography.com and point it to the address 107.162.135.91 which is the address behind starbucks.com To...

License Server Error: No Licenses Available for Specified Server Type

When the XenServer is attempted to be licensed you may come across error "The license-server did not issue a license for server "servername" because there were no license for the specified type available"...

Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 401 Unauthorized

After configuring Client Certificate Authentication for XMS but you cannot request a certificate from the Issuing Server java.lang.RuntimeException: Could not create mobileconfig PA Credentials at com.sparus.nps.iphone.mobileconfig.MobileConfig.toPListMobileConfig.java:574 at...

Veris: Internal server error 500 at log.veris.in

INTRO: i have discovered an internal server error 500 at log.veris.in in sentry app & possible DoS injection with data garbage EXPLOITABILITY: Steps: 1After Sending this request Sentry is crash with an internal server error showing version of sentry and the capability of sending the issue with a...

Harvest: Users enumeration is possible through cycling through recurring[client_id] argument value.

Details: An attacker can enumerate the names of companies on your site by going to the URL https://harvesterxxx.harvestapp.com/recurringinvoices/new?utf8=%E2%9C%93&recurringclientid=4677449&newclientname= and cycling through the numerical value of the recurringclientid= argument, which will view...

Technology sharing: the CBC, Padding Oracle attack re-interpretation, how to break HTTPS-bug warning-the black bar safety net

Why is a re-interpretation? Now about the Padding Oracle attack presentation, the better the articles including the content, are taken from this article in foreign languages. However, the text in the discussion a key issue of how to confirm the Padding bits, and no mention, which makes many puris...

RabbitMQ: /api/... XSS vulnerability

A cross-site scripting vulnerability was discovered in RabbitMQ, which allowed using api/ path info to inject and receive data. A remote attacker could use this flaw to create an "/api/..." URL, forcing a server error that resulted in the server returning an HTML page with embedded text from the...

RabbitMQ: /api/... XSS vulnerability

A cross-site scripting vulnerability was discovered in RabbitMQ, which allowed using api/ path info to inject and receive data. A remote attacker could use this flaw to create an "/api/..." URL, forcing a server error that resulted in the server returning an HTML page with embedded text from the...

Memory corruption

Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block SMB server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."...

Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting / Information Leakage

Exploit Title: Persistent XSS, Information Leakage IDS / IPS Google Dork: intitle: Persistent XSS, Information Leakage IDS / IPS Date: 2015-07-25 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.hexiscyber.com Software Link:...

Hawkeye-G 3.0.1.4912 Cross Site Scripting / Information Leakage

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-HAWKEYEG0725.txt Vendor: ================================ www.hexiscyber.com Product: ================================ Hawkeye-G v3.0.1.4912 Hawkeye G is an active defense...

Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting Information Leakage

Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting Information Leakage Exploit Title: Persistent XSS, Information Leakage IDS / IPS Google Dork: intitle: Persistent XSS, Information Leakage IDS / IPS Date: 2015-07-25 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor...

Shopify: SSRF via 'Insert Image' feature of Products/Collections/Frontpage

Hi Security team, I would like to report an another SSRF issue like my previous bug 67377 https://hackerone.com/reports/67377. The description, threats, risks, exploatations are the same. The base request is the following POST /admin/settings/files.json HTTP/1.1 Host: test-4925.myshopify.com...

Enter: Server responds with the server error logs on account creation

Impact Poorly protected response can provide a gold mine of information to an attacker, disclosing a host of sensitive information such as function and file names. This information may enable the attacker to immediately or later compromise the entire application. PoC 1. Create a new wallet. 2...