Search Results

Given that the HTML5 vibrate function is a new feature that people hardly encounter on websites. It would not be a surprise that there are people falling prey to this tactic. … Is HTML5 vibration feature a security vulnerability? Should mobile browsers enable such a feature on websites by default? …

Below you can find the scan result: Title vulnerability: NTP: Traffic amplification in clrtrap feature of ntpd Solution fix: Disable NTP queries Apply a restrict option to all hosts that are not … What should be the solution if these are vulnerable? …

I am auditing a possible vulnerable piece of ASP code on a Windows environment. … Edit: To summarize I am looking for some kind of way to "comment" out the last part of the filename, either through a bug/feature/vulnerability in ASP, Webserver or windows's handling of files. …

CVE-2013-4310 indicates the action prefix (action:) feature of struts2 framework is vulnerable. Hence the vendor released the patch(?) by disabling this feature. … Is there any other measures that can be taken to mitigate the risks exposed by this vulnerability? …

Can I now assume that I am not affected by the vulnerability on that machine? On another system I have a Xeon E3-1220v5 CPU that does have the vPro feature according to Intel's Ark. … However, the C232 chipset that I am using with it doesn't have the vPro feature. Can I also assume here that I am safe from the mentioned vulnerability? Both system are running Linux and BSD. …

Sometimes vendors announce software upgrade to patch some discovered vulnerability in some feature or service which is not enabled in your system. …

I definitely think it's a vulnerability, impacting confidentiality (considering the CIA triad). … But the issue seems to be a bit controversial, because some say it's the user's fault for uploading the image containing the data, so it's not a vulnerability but a feature, while others like me say that …

escalation vulnerability? … The question is to what extent, assuming systems have such setuid binaries installed, this feature of bash allows local privilege escalation. …

Is this a security vulnerability?? If so, how an attacker can take advantage of? PS: Application is using this feature to attach some support pdf documents where an approver can download and refer. …

How is this not a glaring security vulnerability? Shouldn't the ability to change a root user password not exist? … Is there a way to disable this 'feature' so that it cannot be changed from GRUB like this? Can you do this in all other Linux distros as well? Or is this a Redhat exclusive ability? …

[They ignored my request to opt-out from this feature, just stopped sending me these emails] Can it be treated as a vulnerability? Does it have a name? …

Wildcard DNS is a handy feature, and phishers are apparently using it to bypass filtering. … IMO, this is not a vulnerability - it's by design, just want to cross-check with the community. Question: is lack of a wildcard entry in the DNS a security vulnerability? …

I know I can use the the Generate CSRF PoC feature to test whether I have a CSRF vulnerability but once I mitigate this, how will Burp recognize this fix on the next scan? … I need to be able to demonstrate to the client that the vulnerability is no longer present by running a Burp scan. …

One our requirements from Product team is asking for a usability feature that I think is a potential vulnerability. …

I know that the vulnerability exploits the Heartbeat response which is a TLS feature. … Does that means that there's another possible vulnerability related to Heartbeat, or the wording is like that just to leave the possibility of other vulnerabilities and don't make me feel safe? …