libssh Authentication Bypass Makes it Trivial to Pwn Rafts of Servers
The flaw affects thousands of servers; but GitHub, a major libssh user, is unaffected.
Source: Threat Post – Web Security – libssh
[...]
bypass
Vuln: Spring Security and Spring Framework CVE-2018-1258 Authorization Bypass Vulnerability
Spring Security and Spring Framework CVE-2018-1258 Authorization Bypass Vulnerability
Source: Security Focus – Vuln: Spring Security and Spring Framework CVE-2018-1258 Authorization Bypass
[...]
Vuln: Apache Tomcat CVE-2018-8014 Security Bypass Vulnerability
Apache Tomcat CVE-2018-8014 Security Bypass Vulnerability
Source: Security Focus – Vuln: Apache Tomcat CVE-2018-8014 Security Bypass Vulnerability
[...]
Vuln: IBM Security Directory Server CVE-2015-0138 Man in the Middle Security Bypass Vulnerability
IBM Security Directory Server CVE-2015-0138 Man in the Middle Security Bypass Vulnerability
Source: Security Focus – Vuln: IBM Security Directory Server CVE-2015-0138
[...]
Vuln: Samba CVE-2016-2114 Remote Security Bypass Vulnerability
Samba CVE-2016-2114 Remote Security Bypass Vulnerability
Source: Security Focus – Vuln: Samba CVE-2016-2114 Remote Security Bypass Vulnerability
[...]
Vuln: Samba CVE-2016-2118 Man in the Middle Security Bypass Vulnerability
Samba CVE-2016-2118 Man in the Middle Security Bypass Vulnerability
Source: Security Focus – Vuln: Samba CVE-2016-2118 Man in the Middle Security Bypass
[...]
Vuln: SSL/TLS LogJam Man in the Middle Security Bypass Vulnerability
SSL/TLS LogJam Man in the Middle Security Bypass Vulnerability
Source: Security Focus – Vuln: SSL/TLS LogJam Man in the Middle Security Bypass
[...]
Vuln: IBM DB2 Multiple File Disclosure Security Bypass and Stack Buffer Overflow Vulnerabilities
IBM DB2 Multiple File Disclosure Security Bypass and Stack Buffer Overflow Vulnerabilities
Source: Security Focus – Vuln: IBM DB2 Multiple File Disclosure
[...]
Vuln: OpenSSL CVE-2015-0204 Man in the Middle Security Bypass Vulnerability
OpenSSL CVE-2015-0204 Man in the Middle Security Bypass Vulnerability
Source: Security Focus – Vuln: OpenSSL CVE-2015-0204 Man in the Middle Security Bypass
[...]
Apple's Siri can be exploited to bypass iOS 12 passcode security
It’s looks a bit fiddly to do and you’ll need direct access to an iPhone
Source: The Inquirer – Apple’s Siri
[...]