Lucene search
+L

3 matches found

Hacker One
Hacker One
added 2018/06/02 9:35 p.m.31 views

Liberapay: Liberapay Non Verified Account Takeover with signup feature

Hi, So i saw a strange behaviour of your web on signup feature when that can be escalated to Account Takeover but for limited timeline, Issue: When a New user signup for an account on https://en.liberapay.com/ he have to enter his email address only and it doesn't say anything about sending a...

7AI score
SaveExploits0
OSV
OSV
added 2016/05/09 5:4 p.m.5 views

USN-2966-1 openssh vulnerabilities

Shayan Sadigh discovered that OpenSSH incorrectly handled environment files when the UseLogin feature is enabled. A local attacker could use this issue to gain privileges. CVE-2015-8325 Ben Hawkes discovered that OpenSSH incorrectly handled certain network traffic. A remote attacker could possibl...

9.8CVSS6.8AI score0.37016EPSS
SaveExploits13References5
Positive Technologies
Positive Technologies
added 2016/03/09 12:0 a.m.20 views

PT-2016-3440

Name of the Vulnerable Software and Affected Versions OpenSSH versions through 7.2p2 Description The issue allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD PRELOAD environment variable. This is related to the do setup e...

8.1CVSS7AI score0.99506EPSS
SaveExploits117References132
Rows per page
Query Builder