4138 matches found
Apache Tomcat Security Restriction Bypass Vulnerability (CNVD-2017-11544)
Apache Tomcat is a popular open source JSP application server program. A security vulnerability in the implementation mechanism of the Apache Tomcat error page allows remote attackers to bypass security restrictions and perform unauthorized operations by submitting special requests...
specialcollections.tulane.edu XSS vulnerability
Vulnerable URL: http://specialcollections.tulane.edu/archon/?p=core/contact=email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E \r Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Sierra Wireless GX440 Elevation of Privilege Vulnerability
The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. An elevation of privilege vulnerability exists in the Sierra Wireless GX440, which can be exploited by a remote attacker to submit a special request to elevate privileges...
travel.southwest.com XSS vulnerability
Vulnerable URL: http://travel.southwest.com/specialoffers/topOffers.html?airCheckbox=1=DOLLARS"--!"=350=21000&carCheckbox=1=400&hotelCheckbox=1&vacationCheckbox=1&cruiseCheckbox=1&activityCheckbox=1=Pittsburgh-PIT=Chicago%28Midway%29-MDWbutton=Go Details: Description| Value ---|--- Patched:| No...
Address bar spoofing on macOS Safari(CVE-2017-2500)
version: Safari function spoof document.write"Apple loginPlease input your Apple ID!!!But this is not apple.com!"; window.location.assign"http://www.apple.com:1234"; //or you can use the following JS code: //window.location.assign"http://access.apple.com"; setIntervalspoof,2000; setTimeoutfunctio...
CVE-2017-5173
Geutebrück G-Cam/EFD-2250 (Firmware 1.11.0.12) is affected by two CVEs: CVE-2017-5173 (Improbable neutralization of special elements in OS commands) and CVE-2017-5174 (Authentication bypass). CVE-5174 enables remote authentication bypass; CVE-5173 can allow remote code execution via crafted reque...
CVE-2017-5173
An Improper Neutralization of Special Elements in an OS command issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call...
CVE-2017-5173
An Improper Neutralization of Special Elements in an OS command issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call...
Weblate: Self-XSS can be achieved in the editor link using filter bypass
Description I saw the fixed issue in the https://hackerone.com/reports/223692 and i think i found another filter bypass. I noticed that we actually can use special keywords like %branchs, %files and %lines. So XSS can be achieved in this way: %branchs:alert1;//https:// if the branch will be named...
Microsoft Windows 10 Kernel - nt!NtTraceControl (EtwpSetProviderTraits) Pool Memory Disclosure Explo
Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1161 We have discovered that the handler of the nt!NtTraceControl system call specifically the EtwpSetProviderTraitsUm functionality, opcode 0x1E discloses portions of...
Microsoft Windows 10 Kernel - 'nt!NtTraceControl (EtwpSetProviderTraits)' Pool Memory Disclosure
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1161 We have discovered that the handler of the nt!NtTraceControl system call specifically the EtwpSetProviderTraitsUm functionality, opcode 0x1E discloses portions of uninitialized pool memory to user-mode clients on Windows 10...
Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descriptor of System Processes Token
Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descriptor of System Processes Token / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1145 We have observed on Windows 7 32-bit that for unclear reasons, the kernel-mode structure containing the default DACL ...
Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descriptor of System Processes Token
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1145 We have observed on Windows 7 32-bit that for unclear reasons, the kernel-mode structure containing the default DACL of system processes' tokens lsass.exe, services.exe, ... has 8 uninitialized bytes at the end, as the size ...
PostgreSQL vulnerabilities
The PostgreSQL project reports: Security Fixes nested CASE expressions + database and role names with embedded special characters CVE-2017-7484: selectivity estimators bypass SELECT privilege checks. CVE-2017-7485: libpq ignores PGREQUIRESSL environment variable CVE-2017-7486: pgusermappings view...
Internet Explorer Memory Corruption Vulnerability
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Broadcom Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system’s kernel, using a special application...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the DTS audio driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system’s kernel environment, using a special application...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Broadcom Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system’s kernel, using a special application...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Broadcom Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system’s kernel, using a special application...
The vulnerability of the Android operating system allows a perpetrator to cause the device to freeze and restart.
The vulnerability of the Mediaserver application’s libavc service in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause the device to freeze and restart by using a specially created file...