Google Chrome Security Bypass Vulnerability (CNVD-2017-09205)

Google Chrome is a web browser developed by the American company Google Google. A security bypass vulnerability exists in versions of Google Chrome prior to 59.0.3071.86. An attacker can exploit the vulnerability to bypass extension validation...

CVE-2017-8943

The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Gratipay: Unauthorized access to the slack channel via inside.gratipay.com/appendices/chat

Summary It is possible to force send invites for gratipay slack channel to arbitary email ids with no bruteforce limit. This is done by modifying the coc parameter to 1 in the POST data sent from https://inside.gratipay.com/appendices/chat Description Sending a post request with coc parameter set...

PT-2017-2732

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient validation of input data in the Android CAF build, specifically affecting an argument to a...

Code injection

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers...

CVE-2017-2989

Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database...

CVE-2017-2989

Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database...

CVE-2017-2989: Improper Input Validation

Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database...

PT-2017-15630

Name of the Vulnerable Software and Affected Versions Adobe Campaign versions Build 8770 and earlier Description The issue is related to an input validation bypass that could allow unauthorized access to read, write, or delete data from the Campaign database. Recommendations For Adobe Campaign...

PT-2017-2008

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote...

PT-2017-2012

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote...

PT-2017-2009

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote...

PT-2017-2013

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote...

APSB17-09 Security update available for Adobe Campaign

Adobe has released a security update for Adobe Campaign v6.11 for Windows and Linux. This update resolves an important input validation bypass that could be exploited to read, write or delete data from the Campaign database CVE-2017-2989...

PT-2017-1465

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions affected versions not specified Microsoft Internet Explorer versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft browsers, allowing a remote attacker to...

PT-2017-1587

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient input validation in the Windows operating system, which can be exploited by an attacker to bypass certificate validation using a specially crafted...

PT-2017-1655

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607 Microsoft Windows Server 2016 Description The issue allows remote attackers to modify PowerShell script without invalidating associated signatures. It exists due to insufficient input validation,...

CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3902: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...