CVE-2017-2307: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space...

CVE-2017-2309: Exposure of Sensitive Information to an Unauthorized Actor

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk...

CVE-2017-2305: Incorrect Authorization

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation...

PT-2017-15344

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue allows an unauthenticated remote attacker with network access to create a denial of service condition. Recommendations For versions prior to 16.1R1, update to version 16.1R1 or later t...

PT-2017-15338

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue is related to an insufficient authorization check. On the Junos Space administrative web interface, readonly users can create privileged users, allowing privilege escalation...

CVE-2017-2311: Undefined Security Weakness

On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition...

PT-2017-15342

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue represents an information leak risk due to some restricted web services being accessible over the network when certificate-based authentication is enabled for the Junos Space cluster...

CVE-2017-2308: Improper Restriction of XML External Entity Reference

An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device...

CVE-2017-2306: Incorrect Authorization

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device...

CVE-2017-2310: Undefined Security Weakness

A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk...

PT-2017-15340

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description A reflected cross site scripting issue in the administrative interface may allow remote attackers to steal sensitive information or perform certain administrative actions. Recommendations For...

PT-2017-15339

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue is related to an insufficient authorization check. As a result, readonly users on the Junos Space administrative web interface can execute code on the device. Recommendations For...

UBUNTU-CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

Scale-Out Backup Repository Free Space Calculation

Challenge Jobs running to a Scale-Out Backup Repository report "No scale-out repository extents have sufficient disk space to store the backup file, " even though some of the extents have adequate free space. Cause At the beginning of a job, if no other jobs are running, Veeam Backup & Replicatio...

Space Coast Credit Union Mobile app SSL Certificate Validation Vulnerability

Space Coast Credit Union SCCU Mobile for iOS and Android is a mobile banking app for iOS and Android from Space Coast Credit Union SCCU Bank, featuring quick access to manage bank accounts, manage balances, pay bills, send money and more! Features. A security vulnerability exists in SCCU Mobile...

Linux Kernel 3.11 < 4.8 0 - SO_SNDBUFFORCE & SO_RCVBUFFORCE Local Privilege Escalation Exploi

Exploit for linux platform in category local exploits // CAPNETADMIN - root LPE exploit for CVE-2016-9793 // No KASLR, SMEP or SMAP bypass included // Affected kernels: 3.11 - 4.8 // Tested in QEMU only // https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 // // Usage: // gcc...

Linux/x86 - Disable ASLR Shellcode (80 bytes)

Linux/x86 - Disable ASLR Shellcode 80 bytes. Shellcode exploit for Linx86 platform / Linux/x86 setuid-disable-aslr.c by @abatchy17 - abatchy.com Shellcode size: 80 bytes SLAE-885 section .text global start start: ; ; setruid0,0 ; xor ecx,ecx mov ebx,ecx push 0x46 pop eax int 0x80 ; ;...

Multiple Quick Heal Product Security Bypass Vulnerabilities

Quick Heal Internet Security, Quick Heal Total Security and Quick Heal AntiVirus Pro are antivirus programs from Quick Heal India. A security vulnerability exists in the PE file in several Quick Heal products due to the program's failure to use the ASLR/DEP protection mechanism. An attacker can...

CVE-2017-3212

The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...