CVE-2018-7097

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow cross-site request forgery...

CVE-2018-7094

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-5.0.0.0-22913GA. The vulnerability may be exploited locally to allow disclosure of privileged information...

Design/Logic Flaw

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow access restriction bypass...

Directory traversal

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be locally exploited to allow directory traversal...

CVE-2018-7097

CVE-2018-7097 concerns HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110 (MU7), where a remote attacker could exploit a cross-site request forgery (CSRF) vulnerability to perform unauthorized operations. Affected product: 3PAR SP on VMware vSphere hypervisor. Root cause details are not pro...

CVE-2018-7095

The CVE-2018-7095 entry describes an access-restriction bypass in HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110 (MU7). The CNVD/NVD records confirm a remote bypass vulnerability in SP that could allow unauthorized access; exploitation status and concrete remediation are not provided in...

CVE-2018-7096

The CVE-2018-7096 entry concerns the HPE 3PAR Service Processor (SP). Affected are SPs versioned prior to SP-4.4.0.GA-110 (MU7); the vulnerability is exploitable remotely to achieve code execution. Several connected sources corroborate that this is a remote-code-execution issue in the 3PAR SP sta...

CVE-2018-7099

The CVE-2018-7099 entry describes a vulnerability in HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). A local attacker could disclose privileged information via the SP, with CVSSv3.0 indicating LOCAL access, LOW attack complexity, and Privileges Required: LOW, resulting in HIGH conf...

CVE-2018-7098

CVE-2018-7098 affects 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability can be exploited locally to perform directory traversal, potentially impacting confidentiality and integrity. Upgrade to SP-4.4.0.GA-110(MU7) to mitigate.

SQL Injection Vulnerability in DedeCMS

DedeCMS is a web content management system based on PHP+MySQL technology that supports multiple server platforms. A SQL injection vulnerability exists in DedeCMS v5.7 SP2, which can be exploited by attackers to obtain sensitive database information...

mirassol.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-659767 Description| Value ---|--- Affected Website:| mirassol.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

xml-security-c -- crashes on malformed KeyInfo content

The shibboleth project reports: SAML messages, assertions, and metadata all commonly make use of the XML Signature KeyInfo construct, which expresses information about keys and certificates used in signing or encrypting XML. The Apache Santuario XML Security for C++ library contained code paths a...

cloudwu PBC Reuse After Release Vulnerability

cloudwu PBC is a C-based Google protocol buffer library . A post-release reuse vulnerability in the 'pbcMspquery' function in the map.c file of the libpbc.a static link library in cloudwu PBC 2017-03-02 and earlier versions can be exploited by an attacker to cause a denial of service crash...

10-Strike LANState 8.8 Local Buffer Overflow

Exploit Title: 10-Strike LANState 8.8 - Local Buffer Overflow SEH Date: 2018-07-24 Exploit Author: absolomb Vendor Homepage: https://www.10-strike.com/products.shtml Software Link: https://www.10-strike.com/lanstate/download.shtml Version 8.8 Tested on: Windows 7 SP 1 x86 Open LANState, File -...

NIST SP 800-171A Assessment: Finalized Assessment Objectives Foster a Roadmap to Compliance

On June 13, 2018, NIST formally released their Special Publication SP 800-171A, Assessing Security Requirements Controlled Unclassified Information CUI.This publication provides organizations with an assessment methodology to evaluate their compliance with the CUI security requirements defined in...

Salesforce RegistrationForm Cross-Site Scripting Vulnerability

Salesforce.com is an American cloud computing company based in San Francisco, California. A cross-site scripting vulnerability exists in Salesforce RegistrationForm, which could allow an attacker to deliver a manipulated email by injecting malicious script code...

servicoscontribuinte.sertaozinho.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-634590 Description| Value ---|--- Affected Website:| servicoscontribuinte.sertaozinho.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

servicos2.francodarocha.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-634585 Description| Value ---|--- Affected Website:| servicos2.francodarocha.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

servicos.francodarocha.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-634355 Description| Value ---|--- Affected Website:| servicos.francodarocha.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

votuporanga.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-621863 Description| Value ---|--- Affected Website:| votuporanga.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...