365 matches found
GHSA-2WJ9-434X-9HVP Insecure Deserialization in Backend User Settings in TYPO3 CMS
It has been discovered that backend user settings in $BEUSER-uc are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. Update to TYPO3...
Insecure Deserialization in Backend User Settings in TYPO3 CMS
It has been discovered that backend user settings in $BEUSER-uc are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. Update to TYPO3...
CVE-2020-11067
TYPO3 CMS CVE-2020-11067 affects backend user settings (BE_USER->uc) deserialization in TYPO3 9.0.0–9.5.16 and 10.0.0–10.4.1, enabling remote code execution when combined with third‑party component vulnerabilities, exploitable by a valid backend user account. The issue has been fixed in TYPO3 ...
CVE-2020-11067 Deserialization of Untrusted Data in TYPO3 CMS
In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings in $BEUSER-uc are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user...
TYPO3-CORE-SA-2020-005: Insecure Deserialization in Backend User Settings
More info at https://typo3.org/security/advisory/typo3-core-sa-2020-005...
Insecure Deserialization in Backend User Settings
It has been discovered that backend user settings in $BEUSER-uc are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability...
U.S. Dept Of Defense: CSRF - Modify User Settings with one click - Account TakeOver
Target Url https://█████ Summary: This CSRF is sensitive, similar to the old one 799855 , here attacker can change user name, email, and password with just one click from user. I think its severity should be greater than Medium High since it doesn't require any user interaction but only just bein...
Linux: 'export TMOUT' in /etc/profile
When invoked interactively with the --login option or when invoked as sh, Bash reads the /etc/profile instructions. These usually set the shell variables PATH, USER, MAIL, HOSTNAME and HISTSIZE. On some systems, the umask value is configured in /etc/profile, on other systems this file holds...
Atlassian Fisheye and Crucible Unauthorized Operation Vulnerability
Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A security vulnerability exists in the /json/profile/removeStarAjax.do resource in Atlassian Fisheye...
Why the iPhone 11 Tracks Your Location Even When You Tell It Not To
Russian disinformation, a VC hack, vulnerable VPNs, and more are in the week’s top security news...
CVE-2019-16765
If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker's choosing may be executed on the user's behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to...
Razer: OTP token bypass in accessing user settings
The tester was able to determine that the OTP token used by Razer ID was not being properly verified against the specific user which would allow an adversary to replay their own OTP token against a different user. If the adversary also had been able to obtain the user's login and password through...
FusionPBX 4.4.8 - Remote Code Execution
FusionPBX 4.4.8 - Remote Code Execution !/usr/bin/python3 ''' Exploit Title: FusionPBX v4.4.8 Remote Code Execution Date: 13/08/2019 Exploit Author: Askar @mohammadaskar2 CVE : 2019-15029 Vendor Homepage: https://www.fusionpbx.com Software link: https://www.fusionpbx.com/download Version: v4.4.8...
Input validation
The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change settings that can theoretically adversely impact...
WordPress: Add users to groups who have restricted group invites
Description: WordPress version: 5.2 BuddyPress version: 4.2.0 Through this vulnerability, an attacker could add users to groups who have set : I want to restrict Group invites to my friends only. There is no proper validation of the personal settings of the user and thus the users with such priva...
Design/Logic Flaw
MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description...
CVE-2018-20758
MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description...
CVE-2018-20758
MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description...