5924 matches found
Zendesk: "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header
Summary: In certain conditions, the HTTP target extension is sending the username and password of the authenticated user testing the target in the test request's Authorization header as base64 encoded i.e. HTTP basic auth. I have graded this as a medium due to some mitigating circumstances browse...
Unbreakable Enterprise kernel security update
4.14.35-1844.4.5 - x86/apic/x2apic: set back affinity of a single interrupt to one cpu Mridula Shastry Orabug: 29510342 4.14.35-1844.4.4 - ext4: fix data corruption caused by unaligned direct AIO Lukas Czerner Orabug: 29598590 - swiotlb: checking whether swiotlb buffer is full with iotlbused Dong...
EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1182)
According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authenticati...
EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1187)
According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authenticati...
Pocsuite3 - An Open-Sourced Remote Vulnerability Testing Framework
pocsuite3 is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many powerful features for the ultimate penetration testers and security researchers. Features PoC scripts can...
FreeSMS 2.1.2 - SQL Injection (Authentication Bypass)
Exploit Title: FreeSMS 2.1.2 - Authentication Bypass Date: 2019-04-03 Exploit Author: Yilmaz Degirmenci Vendor Homepage: https://freesms.sourceforge.io/ Software Link: https://sourceforge.net/projects/freesms/ Version: v2.1.2 Category: Webapps Tested on: LAMPP for Linux Software Description :...
CVE-2019-5418
There is a File Content Disclosure vulnerability in Action View 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed...
CVE-2019-5418
There is a File Content Disclosure vulnerability in Action View 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed...
openSUSE Security Update : the Linux Kernel (openSUSE-2019-769)
The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-14633: A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in a way an authentication request from an ISCSI initiator is...
LG SuperSign EZ CMS 2.5 Remote Code Execution (CVE-2018-17173)
A remote code execution vulnerability is exist in LG SuperSign EZ CMS. Successful exploitation could result in arbitrary code execution on the target system...
WordPress Fastest Cache Plugin Arbitrary File Deletion (CVE-2019-6726)
An arbitrary file deletion vulnerability exists in WordPress Fastest Cache Plugin. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...
unicorn/fuzz_emu_mips_32be: Crash in mips_release_mips
Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5663967185207296 Project: unicorn Fuzzer: libFuzzerunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
UBUNTU-CVE-2019-9788
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...
rdesktop Detection
Detects whether rdesktop is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
Apache UNO Remote Code Execution
A remote code execution vulnerability exists in Apache UNO server. Successful exploitation of this vulnerability could lead to arbitrary code execution on the target machine...
Exploit for Path Traversal in Rubyonrails Rails
CVE-2019-5418 - File Content Disclosure on Rails EDIT: th...
Information Disclosure
actionpack is vulnerable to information disclosure. A remote attacker is able to retrieve arbitrary files on the target server when sending malicious Accept headers that are parsed with render file:...
The vulnerability of the WebGL component in the Chrome web browser allows a hacker to copy arbitrary files to the target directory.
The vulnerability of the WebGL component in the Chrome web browser is related to reading data beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the target directory remotely...
Fedora Update for ignition FEDORA-2019-541e91b477
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Design/Logic Flaw
In Storage Performance Development Kit SPDK before 19.01, a malicious vhost client i.e., virtual machine could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains...