CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

PT-2018-12803

Name of the Vulnerable Software and Affected Versions Matera Banco version 1.0.0 Description The issue concerns the mishandling of Java errors in the backend of the software. A stack trace has revealed the use of net.sf.acegisecurity components, indicating a potential security issue...

CVE-2018-14925: Generation of Error Message Containing Sensitive Information

Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components...

AgataSoft Auto PingMaster 1.5 Denial Of Service

Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-02 Vendor Homepage: http://agatasoft.com/ Software Link : http://agatasoft.com/PingMaster.exe Tested Version: 1.5 Vulnerability Type: Denial of Service DoS Local...

WebRTC - H264 NAL Packet Processing Type Confusion Exploit

Exploit for multiple platform in category dos / poc Type confusion can occur when processing a H264 packet. In the method PacketBuffer::FindFrames in modules/videocoding/packetbuffer.cc there is a loop on line 296 that goes through the databuffer vector backwards. The flag ish264 is set before th...

AgataSoft Auto PingMaster 1.5 - Host name Denial of Service (PoC)

AgataSoft Auto PingMaster 1.5 - Host name Denial of Service PoC Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-02 Vendor Homepage: http://agatasoft.com/ Software Link : http://agatasoft.com/PingMaster.exe Tested...

WebRTC - H264 NAL Packet Processing Type Confusion

Type confusion can occur when processing a H264 packet. In the method PacketBuffer::FindFrames in modules/videocoding/packetbuffer.cc there is a loop on line 296 that goes through the databuffer vector backwards. The flag ish264 is set before this loop, and if it is true, the loop extracts and se...

Error: "Execute Commands failed" When Enabling AppFlow from NetScaler MAS

Enabling AppFlow from NetScaler MAS fails with the error message: Execute Commands failed. Config logs /var/mps/log/mpsconfig.log: Wednesday, 10 Jan 18 11:55:20.075 -0500 Error 1 SSH Command Timed out on Wednesday, 10 Jan 18 11:56:20.080 -0500 Error Main SSH: Failed to connect on Wednesday, 10 Ja...

kadocus.nl XSS vulnerability

Open Bug Bounty ID: OBB-655731 Description| Value ---|--- Affected Website:| kadocus.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

@risingstack/trace (2.0.1), democracyos-notifier (>=1.3.0, <=2.1.3) +1 more potentially affected by CVE-2018-3723 via defaults-deep (0.2.3)

defaults-deep NPM version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on defaults-deep and may be impacted: - @risingstack/trace 2.0.1 - democracyos-notifier =1.3.0, =2.1.3 - oddvoter-notifier 1.1.1 Source cves: CVE-2018-3723 Source advisory:...

IBM WebSphere Portal Information Disclosure Vulnerability (CNVD-2018-20564)

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. A security vulnerability exists in IB...

Chrome V8 KeyAccumulator Bug Exploit

Chrome V8 suffers from a bug in KeyAccumulator that can cause a crash. Chrome: V8: A bug with KeyAccumulator PoC: for let i = 0; i https://cs.chromium.org/chromium/src/v8/src/objects.cc?rcl=a2ca1996873f3ffa79d9495fb2cf4e7c0e51d9e9&l=18369. The new table is directly used as the backing store of th...

Information disclosure

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

CVE-2013-2951

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

CVE-2013-2951

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

CVE-2013-2951

CVE-2013-2951 affects IBM WebSphere Portal 7.0.0.x and 8.0.0.x. When tracing is enabled for the Selfcare Portlet (Profile Management), the process writes passwords to a trace file, allowing local users to read sensitive information. Root cause: tracing writes credentials to a file; impact is info...

PT-2018-4077

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0.0.x through 8.0.0.x Description The issue allows local users to obtain sensitive information by reading a trace file when tracing is enabled for the Selfcare Portlet Profile Management. This is because passwor...

CVE-2013-2951: Undefined Security Weakness

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

Security Bulletin: Information disclosure of stack trace in browser window in WebSphere Application Server LIBERTY affect IBM Spectrum LSF Application Center

Summary Information disclosure of stack trace in browser window in WebSphere Application Server LIBERTY Vulnerability Details CVEID: CVE-2018-1553 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptio...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2018-13466)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WAS that stems from t...