Backup and Staging by WP Time Capsule < 1.21.16 - Authentication Bypass

It is possible to login as an administrator on the site due to logical mistakes in the code. PoC The issue resides in wptc-cron-functions.php line 12 where it parses the request. This parserequest function calls the function decodeserverrequestwptc which check if the raw POST payload contains a...

WordPress Backup and Staging by WP Time Capsule plugin <= 1.21.15 - Authentication Bypass vulnerability

Authentication Bypass vulnerability found by WebARX in WordPress Backup and Staging by WP Time Capsule plugin versions = 1.21.15. Solution Update the WordPress Backup and Staging by WP Time Capsule plugin to the latest available version at least 1.21.16...

staging.fujiarts.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1027538 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting staging.fujiarts.com...

Starbucks: China - IDOR on Reservation Staging/Non Production Site - https://reservation.stg.starbucks.com.cn

xmfc discovered that the staging/non production site at https://reservation.stg.starbucks.com.cn/api/customer/reservation/history allowed anyone to retrieve fabricated test user reservation data by providing a OTP of 111111. @xmfc — thank you for reporting this vulnerability and for confirming th...

CVE-2019-3745

The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise versions prior to 2.4.0. This issue is exploitable only during the installation of the product by an administrator. A local authenticated low privilege...

staging.prix-elec.com Improper Access Control vulnerability

Security Researcher Rbcafe Helped patch 251 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting staging.prix-elec.com website and its users. Following...

Citrix SDWAN : Staging failing for all sites

All connected sites are going into failed state under change management after staging is initiated on the MCN : Also not able to download the staged package for any site using the Staged link in change management, as highlighted above...

CVE-2019-10324

A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ReleaseActiondoSubmit, GradleReleaseApiActiondoStaging, MavenReleaseApiActiondoStaging, and UnifiedPromoteBuildActiondoSubmit allowed attackers to schedule a release build, perform release staging for...

CVE-2019-10324

CVE-2019-10324 concerns the Jenkins Artifactory Plugin (versions 3.2.2 and earlier). The vulnerability is a cross-site request forgery (CSRF) affecting multiple release-related actions: ReleaseAction#doSubmit, GradleReleaseApiAction#doStaging, MavenReleaseApiAction#doStaging, and UnifiedPromoteBu...

PT-2019-11725 · Jenkins · Jenkins Artifactory Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Artifactory Plugin versions 3.2.2 and earlier Description: A cross-site request forgery issue allows attackers to perform certain actions, including scheduling a release build, performing release staging for Gradle and Maven projects,...

Kentico CMS Staging SyncServer Unserialize Remote Command Execution

This module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote Command Execution is possible via unauthenticated XML requests to the Staging Service SyncServer.asmx interface ProcessSynchronizationTaskData method stagingTaskData parameter. XML input is passe...

CVE-2019-10068

An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to...

com.ge.research.semtk:arangoDbService (=2.2.2), com.ge.research.semtk:athenaService (=2.2.2) +74 more potentially affected by CVE-2016-3083 via org.apache.hive:hive-service (>=0.8.0 <=1.2.1)

org.apache.hive:hive-service MAVEN version =0.8.0, =2.2.1, =2.2.1, =2.2.1, =2.2.2 - com.ge.research.semtk:sparqlGraphResultsService =2.2.2 and more Source cves: CVE-2016-3083 Source advisory: OSV:GHSA-GF2V-9HP6-44QG...

New Relic: Password theft login.newrelic.com via Request Smuggling

Hi, The Rails application at login.newrelic.com is accessed through a proxy written in Golang, and an nginx server. By sending an ambiguous request, an attacker can desynchronize these servers, leaving the socket to the backend poisoned with a harmful response. This response will then be served u...

WordPress wp-staging 2.4.8 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin wp-staging 2.4.8 - Local File Inclusion Date: 12/01/2019 Exploit Author:41!kh4224rDz Vendor Homepage: https://wp-staging.com/ Software Link: https://wordpress.org/plugins/wp-staging/ Category: webapps...

CVE-2018-10502

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-10502

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-10502

The vulnerability CVE-2018-10502 affects Samsung Galaxy Apps, where the staging mode handling allows a local attacker who can run low-privileged code to modify configuration based on a file’s presence in a user-controlled location, enabling privilege escalation to protected resources. A fix is av...

Samsung Galaxy Apps Privilege Access Control Vulnerability

Samsung Galaxy Apps is an application store program from Samsung South Korea that is used in Samsung cell phones. A privilege access control vulnerability exists in the handling of staging mode in Samsung Galaxy Apps. A local attacker can exploit this vulnerability by obtaining execute permission...

SharpShooter - Payload Generation Framework

SharpShooter is a payload creation framework for the retrieval and execution of arbitrary CSharp source code. SharpShooter is capable of creating payloads in a variety of formats, including HTA, JS, VBS and WSF. It leverages James Forshaw's DotNetToJavaScript tool to invoke methods from the...