249 matches found
Oracle Linux 7 : gdm / and / gnome-session (ELSA-2017-2128)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2128 advisory. gdm 3.22.3-11 - Add japanese translation Resolves: 1449632 3.22.3-10 - Add patches to try to maintain some semblance of compatibility when live upgrading betwee...
Fixed Session Vulnerability in Sierra Wireless GX440
The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless GX440 devices using version 4.3.2 of the ALEOS firmware. An attacker could exploit the vulnerability to access the management web application...
The vulnerability of the software system for managing enterprise assets in IBM Maximo Asset Management allows a perpetrator to gain access to another user’s session.
The vulnerability of the session identifier of the IBM Maximo Asset Management software management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to intercept a session or gain access to another user’s...
Multiple Huawei Server Design Vulnerabilities
Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A security vulnerability exists in several Huawei servers. An attacker can exploit the vulnerability by guessing the session ID used by another user to access the system with a fake identity...
Design/Logic Flaw
Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode the default mode are not affected...
Fedora 25 : php (2016-03518b366b)
18 Aug 2016 PHP 7.0.10 Core: - Fixed bug php72629 Caught exception assignment to variables ignores references. Laruence - Fixed bug php72594 Calling an earlier instance of an included anonymous class fatals. Laruence - Fixed bug php72581 previous property undefined in Exception after...
Nextcloud: **minor issue ** -Nextcloud 10.0 session issue with desktop client and android client
Scenario: -- Installed nextcloud 10.0 locally and created "admin" account -- Installed nextcloud desktop client and andoid client I found session related vulnerability in nextcloud 10.0 where killing session in Useradmin -- Personal -- Sessions not actually killing sessions in desktop client Step...
PHP ext/session/session.c Denial of Service Vulnerability
PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. A denial of service vulnerability exists in PHP versions prior to 5.5.38, 5.6.x prior to 5.6.24, and 7.x prior to 7.0.9 in which the ext/session/session.c...
Flaw Allows Attackers to Remotely Tamper with BMW's In-Car Infotainment System
The Internet of things or connected devices are the next big concerns, as more Internet connectivity means more access points which mean more opportunities for hackers. When it comes to the threat to Internet of Things, Car Hacking is a hot topic. Since many automobiles companies are offering car...
WordPress Collne Welcart e-Commerce Plugin PHP Object Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Collne Welcart e-Commerce is one of the e-commerce plug-ins. A security vulnerability exists in the WordPress Collne Welcar...
CVE-2016-0739
libssh before 0.7.3 improperly truncates ephemeral secrets generated for the 1 diffie-hellman-group1 and 2 diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes...
Trend Micro (SSO) - SSO Redirect & Session Vulnerability
Document Title: =============== Trend Micro SSO - SSO Redirect & Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1694 Trand Micro ID: 1-1-1035080936 Release Date: ============= 2016-03-30 Vulnerability Laboratory ID VL-ID:...
LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability
Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1585 Release Date: ============= 2015-08-26 Vulnerability Laboratory ID VL-ID: ==================================== 15...
Virtual Freer v1.57 - Authentication Bypass Vulnerability
Document Title: =============== Virtual Freer v1.57 - Authentication Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1592 Release Date: ============= 2015-09-03 Vulnerability Laboratory ID VL-ID: ====================================...
LinuxOptic CMS 2009 Authentication Bypass Vulnerability
Exploit for php platform in category web applications Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability Product & Service Introduction: =============================== By employing the best brains in software programming, graphic designing and webmasters in o...
Dogma India dogmaindia CMS Authentication Bypass Vulnerability
Exploit for php platform in category web applications Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability Product & Service Introduction: =============================== Industrial Training Centre ITCs are training Centre which provide training in technical fiel...
[SECURITY] [DSA 3338-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3338-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 18, 2015 https://www.debian.org/security/faq -...
The vulnerability of WebSphere Application Server application servers allows a hacker to gain access to sessions.
The vulnerability of the WebSphere Application Server application server console is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the session by manipulating the JSESSIONID parameter when the Security featur...
ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability
Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1523 Video View: https://www.youtube.com/watch?v=sdSzTguFjY0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1522 Release...
ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability
Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1522 Release Date: ============= 2015-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 1522...