3521 matches found
CVE-2018-20226
The vulnerability CVE-2018-20226 affects THEHIVE PROJECT Cortex up to version 2.1.3, caused by not overriding Role.toString. This enables an organization administrator to add a super administrator (privilege escalation). Exploitation details are not provided in the supplied documents. Remediation...
CVE-2018-20226
An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...
New Delegated Administration feature in Enterprise Threat Protector
Managing security configurations for large organizations with locations scattered around the world can be challenging. Likewise, some businesses have multiple operating divisions that are separate entities but all use the same IT infrastructure. As an IT leader, you likely want to have consistenc...
super-plans.com XSS vulnerability
Open Bug Bounty ID: OBB-710873 Description| Value ---|--- Affected Website:| super-plans.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Super Micro Says Its Gear Wasn't Bugged By Chinese Spies
U.S.-based computing vendor Super Micro has issued the findings of an investigation that it says proves that its hardware was not bugged by the Chinese government. Super Micro, which specializes in green computing for data centers and cloud computing, enterprise IT, big data, high performance...
SRCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-08317)
SRCMS is a security emergency response and defect management software, dedicated to providing large, medium and small businesses and organizations with "the most agile, secure and beautiful security emergency response center building solutions to help companies build their own security emergency...
CVE-2018-19318
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account...
Cross site request forgery (csrf)
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account...
CVE-2018-19319
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges...
CVE-2018-19319
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges...
Cross site request forgery (csrf)
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges...
CVE-2018-19318
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account...
CVE-2018-19319
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges...
PT-2018-14914
Name of the Vulnerable Software and Affected Versions SRCMS version 3.0.0 Description The issue allows for a CSRF attack via the "admin.php?m=Admin&c=manager&a=update" endpoint to change the username and password of the super administrator account. Recommendations For SRCMS version 3.0.0, update ...
WUZHI CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-09136)
WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 there is a cross-site request forgery vulnerability, an attacker can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1 to take advantage of...
WUZHI CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-09137)
WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 exists cross-site request forgery vulnerability, an attacker can change the super administrator's username via index.php?m=core&f=panel&v=editinf to take advantage of this...
F5 Networks BIG-IP : BIG-IP APM client for Linux and macOS vulnerability (K54431371)
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to getownership of files owned by root on the local client host.CVE-2018-5546 Impact A malicious, local, unprivileged user...
CVE-2018-18712
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1...