PT-2019-9494

Name of the Vulnerable Software and Affected Versions eVisitorPass affected versions not specified Description The issue is caused by an error with the Virtual Keyboard Help Dialog, allowing a local attacker to gain elevated privileges on the system. An attacker could exploit this by visiting the...

CVE-2018-17495: Undefined Security Weakness

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prom...

PT-2019-18590

Name of the Vulnerable Software and Affected Versions OpenText Documentum Webtop version 5.3 SP2 Description A security issue exists where XSS and/or a Client Side URL Redirect can occur. The parameter startat in the "/webtop/help/en/default.htm" API endpoint is vulnerable. Recommendations For...

TrolleyExpress.exe crashed when Workspace app (Receiver) was installed.

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. TrolleyExpress.exe crashed whenWorkspace app Receiver was installed...

Description of the security update for Word Viewer: February 12, 2019

None None...

Citrix Workspace App Launcher is unable to launch applications automatically with Safari 12

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Workspace App Launcher is not able to launch applications automatically with Safari browser...

HTML5 Video Player 1.2.5 - Local Buffer Overflow (Non SEH)

!/usr/bin/python Exploit Title: HTML5 Video Player 1.2.5 - Local Buffer Overflow - Non SEH Date: 27/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: http://www.html5videoplayer.net/download.html Software: http://www.html5videoplayer.net/html5videoplayer-setup.exe Contact:...

January 17, 2019—KB4480955 (Preview of Monthly Rollup)

None None...

January 17, 2019—KB4480974 (Preview of Monthly Rollup)

None None...

Joomla! 2.5.x < 3.9.2 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Stored XSS in modbanners affects Joomla 2.5.0 through 3.9.1 - Stored XSS in comcontact affects Joomla 2.5.0 through 3.9.1 - Stored XSS issue in the Global Configuration...

January 15, 2019—KB4480967 (OS Build 16299.936)

None None...

January 15, 2019—KB4480976 (OS Build 17134.556)

None None...

January 15, 2019—KB4480969 (Preview of Monthly Rollup)

None None...

Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: January 8, 2019

Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: January 8, 2019 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...

help-wp.ru XSS vulnerability

Open Bug Bounty ID: OBB-718964 Description| Value ---|--- Affected Website:| help-wp.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

In Project Maven's Wake, the Pentagon Seeks AI Tech Talent

The Defense Department wants to use AI in warfare. In the aftermath of Project Maven, it still needs Big Tech’s help...

Information Disclosure

managesieve is vulnerable to information disclosure attacks. The vulnerability exists as the environment variable SIEVEPASSWORD is disclosed when displaying usage help...

CVE-2018-19439

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

CVE-2018-19439: Improper Neutralization of Input During Web Page Generation

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

Description of the security update for the elevation of privilege vulnerabilities in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: December 11, 2018

Description of the security update for the elevation of privilege vulnerabilities in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: December 11, 2018 Summary Windows elevation of privilege vulnerabilities exist in the following scenarios: When Windows incorrectly handles calls...