Mystery Company Offers $250,000 Bounty for VM Escape Vulnerabilities

An unnamed company will start an eight-week, invite-only bug bounty program in September that offers a $250,000 payout for virtual-machine escape vulnerabilities tied to an unreleased product. Bugcrowd announced the program today, and said the high-priced bounty is the largest advertised bounty o...

CVE-2017-6747

A vulnerability in the authentication module of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An...

CVE-2017-6747

A vulnerability in the authentication module of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An...

CVE-2017-6747

Cisco Identity Services Engine (ISE) and related appliances (ISE Express and ISE Virtual Appliance) are affected by CVE-2017-6747, a unauthenticated remote authentication bypass vulnerability in the authentication module. The issue arises from improper handling of authentication requests and poli...

CVE-2017-6747: Improper Authentication

A vulnerability in the authentication module of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An...

Cisco Identity Services Engine Authentication Bypass Vulnerability (cisco-sa-20170802-ise)

A vulnerability in the authentication module of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass local authentication. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Cisco Identity Services Engine Authentication Bypass Vulnerability

A vulnerability in the authentication module of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An...

super-electronics-china.com XSS vulnerability

Open Bug Bounty ID: OBB-271399 Description| Value ---|--- Affected Website:| super-electronics-china.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-Site Scripting Vulnerability in LvyeCMS

LvyeCms 旅烨cms is a php content management system based on ThinkPHP. A cross-site scripting vulnerability exists in LvyeCMS. The vulnerability stems from the system not strictly filtering the backend parameters. An attacker can obtain super admin login privileges by constructing a specially crafte...

super-spanisch.de XSS vulnerability

Open Bug Bounty ID: OBB-262683 Description| Value ---|--- Affected Website:| super-spanisch.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Automattic: Multiple File Manipulation bugs in WP Super Cache

Summary I got redirected to report the vulnerabilities here by Brandon Kraft one of your developers, so I am reporting them here. Basically, the issue is caused because of insufficient filtering there is one but it can be bypassed For instance, in /wp-cache.php, you used: 1575: $page =...

AWS Public Sector Summit 2017: Cloud Super Powers and Security

Coalfire recently returned from the Amazon Web Services AWS Public Sector Summit, held in Washington, D.C., which addresses some of the most pressing issues todays leaders face around security, governance and compliance, and more. While Coalfire has attended the show in the past, we were especial...

WebKit JSC - Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope

WebKit JSC - Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1173 When a super expression is used in an arrow function, the following code, which generates bytecode, is called. if...

WebKit JSC - Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1173 When a super expression is used in an arrow function, the following code, which generates bytecode, is called. if needsToUpdateArrowFunctionContext && !codeBlock-isArrowFunction bool canReuseLexicalEnvironment =...

[SECURITY] [DSA 3867-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3867-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 30, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3867-1 (sudo - security update)

The Qualys Security team discovered that sudo, a program designed to provide limited super user privileges to specific users, does not properly parse OpenVAS Vulnerability Test $Id: deb3867.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3867-1 using nvtgen 1.0 Script...

Joomla! Core XSS Vulnerability(CVE-2017-7986)

Joomla! is one of the world's most popular content management system CMS solutions. It enables users to build custom Web sites and powerful online applications. More than 3 percent of Web sites are running Joomla!, and it accounts for more than 9 percent of CMS market share. As of November 2016,...

Super File Explorer 1.0.1 Arbitrary File Upload Vulnerability

Super File Explorer version 1.0.1 suffers from a remote file upload vulnerability. Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability Product & Service Introduction: =============================== This app is a file manager and viewer. For iPhone, iPo...

Super File Explorer 1.0.1 Arbitrary File Upload

Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2034 Release Date: ============= 2017-02-23 Vulnerability Laboratory ID VL-ID:...

PT-2017-2770 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue is related to the sanity check raw super function in the Linux kernel, which does not properly validate the segment count. This allows local users to gain privileges via unspecified...