CVE-2015-2215

Open redirect vulnerability in the Services single sign-on server helper servicesssoserverhelper module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...

CVE-2015-2215

The CVE-2015-2215 entry concerns Drupal’s Services single sign-on server helper module. The vulnerability is an open redirect: the module fails to validate some user-supplied URLs in redirect parameters, allowing remote attackers to redirect users to arbitrary sites and facilitate phishing. Affec...

HackerOne: Auto Approval of Invitation to join Team as a Team member

Hi Hackerone, I have found a vulnerability wherein once a Team manager of any team sends out an Invitation to another Hackerone user to join his team, the invited team member gets auto accepted into the team to which he is being invited to join. The choice of "Accept" or "Reject" invitation which...

Drupal Services single sign-on server helper module open redirect vulnerability

Drupal is the Drupal community maintains a set of free, open source content management system developed in PHP language. services single sign-on server helper is one of the services single sign-on helper module. An open redirect vulnerability exists in version 7.x of the Drupal Services single...

UBUNTU-CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

FortiAuthenticator v300 build 0007 Multiple Vulnerabilities

Fortinet FortiAuthenticator suffers from subshell bypass, cross site scripting, password disclosure, and file disclosure vulnerabilities. Fortinet FortiAuthenticator Multiple Vulnerabilities Affected Versions: Verified on FortiAuthenticator v300 build 0007 +-------------+ | Description |...

FreeBSD Patches Kernel Bugs

Developers behind the operating system FreeBSD patched a handful of vulnerabilities in its kernel code yesterday that could have enabled an attacker to crash the system, execute arbitrary code, or disclose sensitive kernel memory. FreeBSD patched the bugs fairly quickly. Francisco Falcon, a membe...

Oracle Access Manager Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple unspecified vulnerabilities that allow remote attackers to impact integrity and confidentiality. Note that this plugin does not check for additional configuration required to completely mitigate CVE-2015-036...

Unspecified Vulnerability in Oracle OpenSSO SAML Subpart (CNVD-2015-00552)

OpenSSO project is an open source implementation of SSO Single Sign-On for Web applications deployed on different Web or different servers to provide centralized authentication capabilities . Oracle OpenSSO SAML subcomponent has a security vulnerability that allows remote attackers to exploit the...

CVE-2015-0367

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

Mozilla Firefox CSP Information Disclosure Vulnerability (Dec 2014) - Mac OS X

Mozilla Firefox is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox CSP Information Disclosure Vulnerability (Dec 2014) - Windows

Mozilla Firefox is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CSP leaks redirect data via violation reports — Mozilla

Security researcher Muneaki Nishimura discovered that Content Security Policy CSP violation reports triggered by a redirect did not remove path information as required by the CSP specification. This potentially reveals information about the redirect that would not otherwise be known to the origin...

Mac OS X Mavericks IOBluetoothHCIUserClient Privilege Escalation

No description provided by source. / pwn.c, by @rpaleari and @joystick This PoC exploits a missing sign check in IOBluetoothHCIUserClient::SimpleDispatchWL. Tested on Mac OS X Mavericks 10.9.4/10.9.5. Compile with: gcc -Wall -o pwn,.c -framework IOKit / include stdio.h include string.h include...

TinyShop SQL注入一枚

简要描述： 20140926 详细说明： 因为是支付，会查询订单状态，要先创建一个订单。 /protected/controllers/payment.php中 paybalance函数 totalfee变量 //余额支付方式，服务器端处理 public function paybalance $sign = Req::post'sign';//从post中获取sign $args = Req::post; unset$args'sign'; $totalfee = Req::post'totalfee';//直接从post获取 $attach =...

Apple Mac OSX (Mavericks) - IOBluetoothHCIUserClient Privilege Escalation

Apple Mac OSX Mavericks - IOBluetoothHCIUserClient Privilege Escalation / pwn.c, by @rpaleari and @joystick This PoC exploits a missing sign check in IOBluetoothHCIUserClient::SimpleDispatchWL. Tested on Mac OS X Mavericks 10.9.4/10.9.5. Compile with: gcc -Wall -o pwn,.c -framework IOKit / includ...

Apple Mac OSX (Mavericks) - 'IOBluetoothHCIUserClient' Privilege Escalation

/ pwn.c, by @rpaleari and @joystick This PoC exploits a missing sign check in IOBluetoothHCIUserClient::SimpleDispatchWL. Tested on Mac OS X Mavericks 10.9.4/10.9.5. Compile with: gcc -Wall -o pwn,.c -framework IOKit / include include include include include uint64t payload / Your payload goes...

Oracle Access Manager (October 2014 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple unspecified vulnerabilities in the Admin Console. CVE-2014-6462, CVE-2014-6552, CVE-2014-6553, CVE-2014-6554 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2014-7078

CVE-2014-7078 : The Payoneer Sign Up (aka com.wPayoneerSignUp) Android app, version 0.1, does not verify X.509 certificates from SSL servers. This weakness allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. The provided sourc...

libXi: Sign extension issues resulting in heap-based buffer overflow

A buffer overflow flaw was found in the way the XListInputDevices function of X.Org X11's libXi runtime library handled signed numbers. A malicious X11 server could possibly use this flaw to execute arbitrary code with the privileges of the user running an X11 client...