AgataSoft Auto PingMaster 1.5 Denial Of Service

Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-02 Vendor Homepage: http://agatasoft.com/ Software Link : http://agatasoft.com/PingMaster.exe Tested Version: 1.5 Vulnerability Type: Denial of Service DoS Local...

AgataSoft Auto PingMaster 1.5 - Host name Denial of Service (PoC)

AgataSoft Auto PingMaster 1.5 - Host name Denial of Service PoC Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-02 Vendor Homepage: http://agatasoft.com/ Software Link : http://agatasoft.com/PingMaster.exe Tested...

WebRTC - H264 NAL Packet Processing Type Confusion

Type confusion can occur when processing a H264 packet. In the method PacketBuffer::FindFrames in modules/videocoding/packetbuffer.cc there is a loop on line 296 that goes through the databuffer vector backwards. The flag ish264 is set before this loop, and if it is true, the loop extracts and se...

Error: "Execute Commands failed" When Enabling AppFlow from NetScaler MAS

Enabling AppFlow from NetScaler MAS fails with the error message: Execute Commands failed. Config logs /var/mps/log/mpsconfig.log: Wednesday, 10 Jan 18 11:55:20.075 -0500 Error 1 SSH Command Timed out on Wednesday, 10 Jan 18 11:56:20.080 -0500 Error Main SSH: Failed to connect on Wednesday, 10 Ja...

kadocus.nl XSS vulnerability

Open Bug Bounty ID: OBB-655731 Description| Value ---|--- Affected Website:| kadocus.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

@risingstack/trace (=2.0.1), democracyos-notifier (>=1.3.0 <=2.1.3) +1 more potentially affected by CVE-2018-3723 via defaults-deep (=0.2.3)

defaults-deep NPM version =0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on defaults-deep and may be impacted: - @risingstack/trace =2.0.1 - democracyos-notifier =1.3.0, =2.1.3 - oddvoter-notifier =1.1.1 Source cves: CVE-2018-3723 Source advisory:...

Chrome V8 KeyAccumulator Bug Exploit

Chrome V8 suffers from a bug in KeyAccumulator that can cause a crash. Chrome: V8: A bug with KeyAccumulator PoC: for let i = 0; i https://cs.chromium.org/chromium/src/v8/src/objects.cc?rcl=a2ca1996873f3ffa79d9495fb2cf4e7c0e51d9e9&l=18369. The new table is directly used as the backing store of th...

IBM WebSphere Portal Information Disclosure Vulnerability (CNVD-2018-20564)

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. A security vulnerability exists in IB...

CVE-2013-2951

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

Information disclosure

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

CVE-2013-2951

CVE-2013-2951 affects IBM WebSphere Portal 7.0.0.x and 8.0.0.x. When tracing is enabled for the Selfcare Portlet (Profile Management), the process writes passwords to a trace file, allowing local users to read sensitive information. Root cause: tracing writes credentials to a file; impact is info...

CVE-2013-2951

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet Profile Management, which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621...

Security Bulletin: Information disclosure of stack trace in browser window in WebSphere Application Server LIBERTY affect IBM Spectrum LSF Application Center

Summary Information disclosure of stack trace in browser window in WebSphere Application Server LIBERTY Vulnerability Details CVEID: CVE-2018-1553 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptio...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2018-13466)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WAS that stems from t...

CVE-2018-1621

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346...

CVE-2018-1621

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346...

CVE-2017-1509

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719...

Design/Logic Flaw

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346...

Information disclosure

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719...

CVE-2017-1795

IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042...