CVE-2018-0009

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass...

CVE-2018-0009: Undefined Security Weakness

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass...

Access Bypass

Drupal is vulnerable to access bypass. The entity access system does not prevent the unauthorized access to view, create, update, or delete entities without UUIDs, and entities with different access restrictions on different revisions of the same entity...

FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (473b6a9e-8493-11e7-b24b-6cf0497db129)

Drupal Security Team : CVE-2017-6923: Views - Access Bypass - Moderately Critical CVE-2017-6924: REST API can bypass comment approval - Access Bypass - Moderately Critica CVE-2017-6925: Entity access bypass for entities that do not have UUIDs or have protected revisions - Access Bypass - Critical...

Entity access bypass for entities that do not have UUIDs or have protected revisions.

More info at https://www.drupal.org/SA-CORE-2017-004...

Entity access bypass for entities that do not have UUIDs or have protected revisions.

More info at https://www.drupal.org/SA-CORE-2017-004...

drupal -- Drupal Core - Multiple Vulnerabilities

Drupal Security Team: CVE-2017-6923: Views - Access Bypass - Moderately Critical CVE-2017-6924: REST API can bypass comment approval - Access Bypass - Moderately Critica CVE-2017-6925: Entity access bypass for entities that do not have UUIDs or have protected revisions - Access Bypass - Critical...

Uber: IDOR in activateFuelCard id allows bulk lookup of driver uuids

Due to an IDOR in the activateFuelCard endpoint, an attacker could enumerate driver UUIDs. When given a sequential card ID number, the endpoint returned a driver’s UUID given, allowing an attacker to gather many driver UUIDs for use in a different attack. Thanks, @cablej!...

PT-2014-4861

Name of the Vulnerable Software and Affected Versions Apache CouchDB versions 1.5.0 and earlier Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources. This is achieved by exploiting the count parameter in the "/ uuids" API endpoint...

Apache CouchDB 1.5.0 - 'uuids' Denial of Service

Exploit Title: Couchdb uuids DOS exploit Google Dork inurl: uuids Date: 03/24/2014 Exploit Author: KrustyHack Vendor Homepage: http://couchdb.apache.org/ Software Link: http://couchdb.apache.org/ Version: up to 1.5.0 Tested on: Linux Couchdb up to 1.5.0 HOW TO ====== curl...

Appliance Mode (Hotadd) Requirements and Troubleshooting

Requirements Virtual Appliance HOTADD Requirements and Limitations Requirements for Backup and Restore of Encrypted VMs Known Issues If the VM disk resides on a vVol, the Veeam VMware Backup Proxy's VM configuration file vmx must be on the same vVol. The Veeam VMware Backup Proxy VM must be locat...