15176 matches found
Security Bulletin: Vulnerability in Apache Tomcat affects IBM UrbanCode Build (CVE-2014-0227)
Summary Apache Tomcat is vulnerable to HTTP request smuggling. Apache Tomcat is used by IBM UrbanCode Build. Vulnerability Details CVE-ID: CVE-2014-0227 Description: Apache Tomcat is vulnerable to HTTP request smuggling. A remote attacker could send a specially-crafted request in a malformed...
Security Bulletin: IBM TRIRIGA Application Platform Cross Site Request Forgery Vulnerability (CVE-2016-0348)
Summary Unauthenticated requests can be made to a vulnerable web application, which then performs unauthorized action on behalf of the attacker. Vulnerability Details CVEID: CVE-2016-0348 DESCRIPTION: IBM Tririga is vulnerable to cross-site request forgery, caused by improper validation of...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation for Multiplatforms (CVE-2015-3183)
Summary WebSphere Application Server is shipped as a component of IBM Tivoli System Automation for Multiplatforms. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-3183 DESCRIPTION:...
Adobe CreativeCloud - (Events ) Persistent Vulnerability
Document Title: =============== Adobe CreativeCloud - Events Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1840 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 1840...
Security Bulletin: Open Source Apache Tomcat vulnerability (CVE-2014-0227)
Summary Apache Tomcat is vulnerable to HTTP request smuggling. A remote attacker could send a specially-crafted request in a malformed chunked header to the Web server to cause multiple processing conflicts on the servers. An attacker could exploit this vulnerability to poison the web cache, bypa...
web.antaq.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-633022 Description| Value ---|--- Affected Website:| web.antaq.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
OEcms 3.1 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: OEcms 3.1 - Cross-Site Scripting Author: Felipe "Renzi" Gabriel Software: OEcms v3.1 CVE: CVE-2018-12095 Technical Details & Description: A Reflected Cross-Site Scripting web vulnerability has been discovered in the "OEcms v3.1"...
Security Bulletin:Vulnerability in OpenSSL affects IBM PureApplication System. (CVE-2015-1788)
Summary An OpenSSL denial of service vulnerability disclosed by the OpenSSL Project affects GSKit. IBM PureApplication System uses GSKit in user registry components in the Web application pattern type and GPFS pattern type. IBM PureApplication System addressed the applicable CVE. Vulnerability...
Security Bulletin: TLS padding vulnerability affects IBM PureApplication System (CVE-2014-8730)
Summary Transport Layer Security TLS padding vulnerability via a POODLE Padding Oracle On Downgraded Legacy Encryption like attack affects IBM PureApplication System. Vulnerability Details CVEID: CVE-2014-8730 DESCRIPTION: IBM PureApplication Server bundles IBM HTTP Server, which could allow a...
Shopify - (Applications) Privilege Escalation Vulnerability
Document Title: =============== Shopify - Applications Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1549 Release Date: ============= 2018-06-15 Vulnerability Laboratory ID VL-ID: ====================================...
PHP Obfuscated Key Vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A security vulnerability exists in PH...
Shopify - (Applications) Privilege Escalation Vulnerability
Document Title: =============== Shopify - Applications Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1549 Release Date: ============= 2018-06-14 Vulnerability Laboratory ID VL-ID: ====================================...
ReleaseWire - (Profile) Persistent Cross Site Scripting
Document Title: =============== ReleaseWire - Profile Persistent Cross Site Scripting References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2127 View Video: https://www.youtube.com/watch?v=M3c1GjI2j0 Release Date: ============= 2018-06-14 Vulnerability Laboratory ID VL-ID:...
Session fixation
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web...
UBUNTU-CVE-2018-11385
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web...
CVE-2018-11385
CVE-2018-11385 affects the Symfony Security component (Guard login) across multiple branches: 2.7.x <= 2.7.47 (fixed in 2.7.48), 2.8.x <= 2.8.40 (fixed in 2.8.41), 3.3.x <= 3.3.16 (fixed in 3.3.17), 3.4.x <= 3.4.10 (fixed in 3.4.11), and 4.0.x
CVE-2018-11385
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web...
Eclipse Vert.x 3.5.1 HTTP Header Injection
COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: Vert.x 1 CSNC ID: CSNC-2018-021 Subject: HTTP Header Injection Risk: Medium Effect: Remotely exploitable Author: Lukasz D. [email protected] Date: 12.06.2018 Introduction: ------------- Eclipse...
OEcms 3.1 Cross Site Scripting
Title: ======= OEcms v3.1 - Reflected Cross-Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...
Joomla! Component EkRishta 2.10 - username SQL Injection
Joomla! Component EkRishta 2.10 - username SQL Injection Exploit Title: Joomla! Component EkRishta 2.10 - 'username' SQL Injection Date: 2018-06-11 Exploit Author: L0RD Software Link: https://extensions.joomla.org/extension/ek-rishta/ Vendor Homepage: https://www.joomlaextensions.co.in/ Version:...