Cisco Application Policy Infrastructure Controller Local Elevation of Privilege Vulnerability

The Cisco Application Policy Infrastructure Controller is a robust all-in-one architecture for transport networks. Cisco Application Policy Infrastructure Controller has a security vulnerability in the installation file that allows a local attacker to exploit the vulnerability to submit special...

Legal Robot: Special characters are not filtered out on profile fields

hi there , While looking around into your web application I noticed in the fields Firstname and Lastname you can set a url . example http://www.evilsite.com . where I am using special characters like :// and . . but when I try out other special characters - or particularly a payload such as " , i...

CVE-2017-1190

IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By manipulating a configurable property, an attacker could exploit this vulnerability to gain full control over the system. IBM X-Force ID:...

Microsoft Windows Express Remote Code Execution Vulnerability

Microsoft Windows is the popular operating system. Microsoft Windows does not properly handle constructed embedded fonts, allowing an attacker to exploit a vulnerability by submitting a special request that could execute arbitrary code...

Red Hat OpenShift3 Kubernetes Sensitive Information Disclosure Vulnerability

Red Hat OpenShift3 is a Platform-as-a-Service PaaS cloud computing platform that builds, tests, deploys and runs applications. A security vulnerability in Red Hat OpenShift3 Kubernetes allows remote attackers to exploit the vulnerability by submitting a special request to access images that are...

Legal Robot: Lack of input validation in e-mail & user name, job title, company name field

Hi, During sign up input validation didn't deploy properly on e-mail & name field. I've tested inputing following e-mail during sign up: hacker%@gmail.com Your system send email to verification the account though the e-mail address is invalid as gmail doesn't allow user to sign up using special...

Firing a Locked Smart Gun

The Armatix IP1 "smart gun" can only be fired by someone who is wearing a special watch. Unfortunately, this security measure is easily hackable...

Microsoft Windows Kernel Local Information Disclosure Vulnerability(CVE-2017-8564)

We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys \.\Nsi device discloses portions of uninitialized pool memory to user-mode clients, likely due to output structure alignment holes. On our test Windows 7 32-bit workstation, an example layout of the output buffer is as...

Explained: the Dark Web

You may have seen the Dark Web referenced in popular TV shows and have gotten the wrong idea, or if you already knew about it, you may have snorted in derision. It’s also sometimes called the Deep Web, when in fact the Dark Web is only a part of the Deep Web. Terminology Surface Web is what we...

CVE-2017-7540

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation...

Microsoft Windows Kernel - IOCTL 0x120007 (NsiGetParameter) nsiproxy/netio Pool Memory Disclosure

Exploit for windows platform in category dos / poc / We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys \.\Nsi device discloses portions of uninitialized pool memory to user-mode clients, likely due to output structure alignment holes. On our test Windows 7 32-bit...

Wireshark WBXML Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the Wireshark WBXML parser allows remote attackers to exploit the vulnerability to submit special requests for denial of service attacks...

Microsoft Windows Kernel - IOCTL 0x120007 NsiGetParameter nsiproxynetio Pool Memory Disclosure

Microsoft Windows Kernel - IOCTL 0x120007 NsiGetParameter nsiproxynetio Pool Memory Disclosure / We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys \.\Nsi device discloses portions of uninitialized pool memory to user-mode clients, likely due to output structure alignment...

Microsoft Windows Https.sys Information Disclosure Vulnerability

Microsoft Windows is a popular computer operating system. The Microsoft Windows HTTP.sys server application component does not properly handle memory objects, allowing an attacker to exploit a vulnerability by submitting a special request that could obtain sensitive information...

WakaTime: Password Policy Issue

Greetings Wakatime, I just found a weak password policy in your login page. Some websites prevents the users to use password constructed of character combinations that otherwise meet company policy, but should no longer be used because they have been deemed insecure for one or more reasons, such ...

Xen grant-table feature denial-of-service vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A security vulnerability in the Xen grant-table feature allows an attacker to exploit the vulnerability by submitting a special request to crash the system...

Google Android WideVine DRM Security Bypass Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in the WideVine DRM in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized operation...

universalspecialevents.com XSS vulnerability

Vulnerable URL: http://www.universalspecialevents.com/tickets/concertsFrame.php?value=1"...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2017-13539)

IBM Security QRadar SIEM applies security intelligence and perceptual analytics by consolidating, normalizing and correlating log and stream data to help prioritize security events and stay away from advanced threats. IBM QRadar Security Information and Event Management suffers from an informatio...

Windows Kernel pool memory disclosure in nt!NtNotifyChangeDirectoryFile(CVE-2017-0299)

We have discovered that the nt!NtNotifyChangeDirectoryFile system call discloses portions of uninitialized pool memory to user-mode clients, due to output structure alignment holes. On our test Windows 10 32-bit workstation, an example layout of the output buffer is as follows: --- cut ---...