Dell EMC RecoverPoint Local Root Command Execution

Exploit Title: Dell EMC RecoverPoint &2 root@recoverpoint:/ id uid=0root gid=0root groups=0root root@recoverpoint:/...

Brave Software: Navigation to restricted origins via "Open in new tab"

Summary: It's possible to open links pointing to file:/// origin from web pages using "Open link in a new tab" in context menu. https://hackerone.com/bugs?reportid=369185 shows unsafe ssh:// protocol handling, which leads to information leak using sshOS username and etc.. The vulnerability is...

NetScaler Gateway : Radius Authentication Fails Intermittently Despite RADIUS Server Accept

NetScaler Gateway Authentication Scenario 1: Gateway Page would present the authentication to be done in 2 factor. First the user enters the LDAP username and password. Now there would be 2 options either user can do the touch authentication present in the MFA Application or else can wait for the...

Security Bulletin: Login Error Messages Credential Enumeration in ClearQuest Web (CVE-2014-3105)

Summary IBM Rational ClearQuest Web for OSLC integration is vulnerable to Login Error Messages Credential Enumeration. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your...

Security Bulletin: IBM Emptoris Services Procurement is affected by Information leakage vulnerability (CVE-2017-1547)

Summary The IBM Emptoris Services Procurement product is vulnerable to getting valid usernames through Forgot password process Vulnerability Details CVEID: CVE-2017-1547 DESCRIPTION: IBM Emptoris Services Procurement could allow an unauthorized user enumerate usernames through the use of the forg...

PvPGN Stats ladder/stats.php file SQL injection vulnerability

PvPGN Stats is a PHP-based tool that supports the integration of websites with the PvPGN game server, displaying server status, ladder pages, and more. A SQL injection vulnerability exists in the ladder/stats.php file in PvPGN Stats version 2.4.6, which stems from the program failing to filter...

Symfony Authentication Bypass Vulnerability

Sensio Labs Symfony is a French company Sensio Labs set of free , MVC-based PHP development framework , which provides commonly used functional components and tools , can be used to quickly create complex WEB programs . Ldap component is a lightweight directory access protocol component . A...

Acccheck Command Injection Vulnerability

acccheck is a suite of password brute force tools used in penetration testing to perform Windows authentication over the SMB protocol. A command injection vulnerability exists in the acccheck.pl file in version 0.2.1, which stems from the program's lack of filtering of user input. The vulnerabili...

DEBIAN-CVE-2018-11407

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE:...

Command injection

acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line...

CVE-2018-12268

CVE-2018-12268 affects acccheck 0.2.1; vulnerable component is acccheck.pl, allowing Command Injection via shell metacharacters in a username or password file, as demonstrated by an injected smbclient command line. Root cause: lack of input filtering/validation. Impact: remote code execution with...

CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

Design/Logic Flaw

If a long user name is used in a username/password combination in a site URL such as " http://UserName:email protected", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

CVE-2018-5152

WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firef...

userSpice 4.3.24 - Username Enumeration

userSpice 4.3.24 - Username Enumeration Exploit Title: userSpice 4.3.24 - Username Enumeration Date: 2018-06-10 Author: Dolev Farhi Vendor or Software Link: www.userspice.com Version: 4.3.24 Tested on: Ubuntu import sys import os.path import requests print"+ UserSpice 4.3.24 Username Enumeration"...

userSpice 4.3.24 Username Enumeration

Exploit Title: userSpice 4.3.24 - Username Enumeration Date: 2018-06-10 Author: Dolev Farhi Vendor or Software Link: www.userspice.com Version: 4.3.24 Tested on: Ubuntu import sys import os.path import requests print"+ UserSpice 4.3.24 Username Enumeration" if lensys.argv != 3: print 'Usage:',...

userSpice 4.3.24 - Username Enumeration Exploit

Exploit for php platform in category web applications Exploit Title: userSpice 4.3.24 - Username Enumeration Author: Dolev Farhi Vendor or Software Link: www.userspice.com Version: 4.3.24 Tested on: Ubuntu import sys import os.path import requests print"+ UserSpice 4.3.24 Username Enumeration" if...

Synology Router Manager Command Injection Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology.EZ-Internet is one of the network configuration tools. A command injection vulnerability exists in EZ-Internet in Synology SRM versions prior to 1.1.6-6931. A remote attacker can exploit the...

userSpice 4.3.24 - Username Enumeration

Exploit Title: userSpice 4.3.24 - Username Enumeration Date: 2018-06-10 Author: Dolev Farhi Vendor or Software Link: www.userspice.com Version: 4.3.24 Tested on: Ubuntu import sys import os.path import requests print"+ UserSpice 4.3.24 Username Enumeration" if lensys.argv != 3: print 'Usage:',...