3395 matches found
PT-2016-6404
Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.11.4 Foreman versions 1.12.x prior to 1.12.1 Description The issue allows remote authenticated users with specific permissions to obtain sensitive network interface information. This can be achieved via a request to...
CVE-2016-5390: Exposure of Sensitive Information to an Unauthorized Actor
Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the viewhosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces...
SonarQube Jenkins Password Disclosure
Advisory Information Title: SonarQube Jenkins Plugin - Plain Text Password Date published: 2013-12-05 Date of last update: 2013-12-05 Vendors contacted : SonarQube and Jenkins CI Discovered by: Christian Catalano Severity: High 2. Vulnerability Information CVE reference: CVE-2013-5676 CVSS v2...
CVE-2016-2065
The CVE-2016-2065 entry concerns the MSM QDSP6 audio driver (sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c) in the Linux kernel 3.x, used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The flaw arises from incorrect use of a parameters pointer when handling an ioctl...
CVE-2016-2064: Out-of-bounds Read
sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service buffer over-read or possibly have unspecified...
Security update for MozillaFirefox, mozilla-nss (important)
Mozilla Firefox was updated to 48.0 to fix security issues, bugs, and deliver various improvements. The following major changes are included: - Process separation e10s is enabled for some users - Add-ons that have not been verified and signed by Mozilla will not load - WebRTC enhancements - The...
OpenSNS v2 \Application\People\Controller\IndexController.class.php parameters arearank, the parameter uid SQL injection
No description provided by source...
V2视频会议系统 /Conf/jsp/systembulletin/bulletinAction.do sysId参数SQL注入漏洞
No description provided by source...
Lindon-EDU V2 数字校园平台 /code/teach/class/classcourse.aspx 参数SubjectID SQL注入漏洞
No description provided by source...
威速科技官网某子站SQL注入可提权服务器
简要描述： 详细说明： 第三方会议系统，V2 Conference. 见: WooYun: V2视频会议系统某处SQL注射、XXE漏洞可getshell 漏洞证明： http://zuyong.v2tech.com/Conf/jsp/systembulletin/bulletinAction.do?operator=details&sysId=-1%20union%20select%201,user%28%29,3,version%28%29,5%23 mysql root权限注入，可写shell. 查看远程桌面端口：39556 创建了wooyun用户，连接远程桌面： img...
Hexchat IRC Client 2.11.0 - Directory Traversal
Hexchat IRC Client 2.11.0 - Directory Traversal !/usr/bin/python Meta information Exploit Title: Hexchat IRC client - Server name log directory traversal Date: 2016-01-26 Exploit Author: PizzaHatHacker Vendor Homepage: https://hexchat.github.io/index.html Software Link:...
FanApp v2 for RB Leipzig - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application FanApp v2 for RB Leipzig published at the 'play' market has multiple vulnerabilities...
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...
java代码审计基础教程之V2会议系统多个漏洞集合/无需登录
简要描述： 包括 sql注入 任意文件下载 越权 getshell xml实体注入 感谢@loopx9大牛帮助 详细说明： 因为学习java并不是很长时间，也没有做深入的研究。但是在学习之后，发现可以审计出一些简单的javaweb漏洞，所以想这这里和大家分享一下。 0x01审计之初 首先，我拿到了源码之后，大概看了一下这个系统的架构，发现是通过Struts写的。在具体看代码之前，我们先看一下这个会议系统有什么功能，在代码审计的时候，不能一股脑的先跑过去就看代码，我们要学会通过功能去找问题的缺陷。现在以...:8288/Conf/jsp/main/mainAction.do...
[SECURITY] Fedora 23 Update: php-htmLawed-1.1.21-1.fc23
PHP code to purify and filter HTML make HTML markup in text secure and standard-compliant process text for use in HTML, XHTML or XML documents restrict HTML elements, attributes or URL protocols using black or white-lists balance tags, check element nesting, transform deprecated attributes and...
Android Pentesting Portable Integrated Environment: Appie
Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...
Toshiba Viewer v2 p3console - Local Denial of Service
Toshiba Viewer v2 p3console - Local Denial of Service !/usr/bin/perl Exploit Title: Toshiba viewer v2 p3console Local Denial of Service Date: 02-02-2016 Author: JaMbA Download: http://business.toshiba.com/downloads/KB/f1Ulds/9942/viewer2-cj242-v106.zip Version: 2 Tested on: Windows 7 my $file=...
Toshiba Viewer v2 p3console - Local Denial of Service
!/usr/bin/perl Exploit Title: Toshiba viewer v2 p3console Local Denial of Service Date: 02-02-2016 Author: JaMbA Download: http://business.toshiba.com/downloads/KB/f1Ulds/9942/viewer2-cj242-v106.zip Version: 2 Tested on: Windows 7 my $file= "Crash.fax"; my $junk= "\x41" x 2048; open$FILE,"$file";...