inflectra-spira-integration stored credentials in plain text

inflectra-spira-integration stored a credential unencrypted in its global configuration file com.inflectra.spiratest.plugins.SpiraBuilder.xml on the Jenkins controller. This credential could be viewed by users with access to the Jenkins controller file system. inflectra-spira-integration now stor...

Custom Header - Automatic Add New Header To Entire BurpSuite HTTP Requests

This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite Scanner, Intruder, Repeater, Proxy History and also you can choose whatever HTTP VERB what do you want to customize. Usage Easy to use ! : Don't forget to click save button ! Changelog 24...

CVE-2019-15333

The CVE-2019-15333 issue affects Lava Flair Z1 (build LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys). A pre-installed app (com.android.lava.powersave, versionCode 400, versionName v4.0.27) exposes an exported interface that allows any co-located app to programmatically disable and enable W...

CVE-2019-16210

Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...

Default credentials

Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...

CVE-2019-16210: Missing Encryption of Sensitive Data

Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...

PT-2019-14583

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.0 Description The issue concerns the logging of database connection passwords in plain text when the support save feature is triggered. Recommendations For versions prior to 2.0, update to version 2.0 or late...

November 5, 2019, update for Access 2016 (KB4475539)

None None...

BSA-2019-869

Security Advisory ID : BSA-2019-869 Component : SANnav Revision : 1.0 An information exposure vulnerability, in Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save. The vulnerability could allow an authenticated local malicious user with...

CVE-2019-17553

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI...

vBulletin 5.0 < 5.5.4 - 'updateAvatar' Authenticated Remote Code Execution

?php / --------------------------------------------------------------------- vBulletin = 5.5.4 updateAvatar Remote Code Execution Vulnerability --------------------------------------------------------------------- author..............: Egidio Romano aka EgiX mail................:...

CVE-2019-15635

An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana e.g., MySQL are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and test" button within a data source's settings menu. When watching the transaction with Burp Proxy, th...

UBUNTU-CVE-2019-15635

An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana e.g., MySQL are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and test" button within a data source's settings menu. When watching the transaction with Burp Proxy, th...

CVE-2019-15635

An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana e.g., MySQL are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and test" button within a data source's settings menu. When watching the transaction with Burp Proxy, th...

CVE-2016-10974

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

PT-2019-7767

Name of the Vulnerable Software and Affected Versions fluid-responsive-slideshow plugin versions prior to 2.2.7 Description The issue concerns a CSRF vulnerability that leads to stored XSS. This occurs in the frs save function, allowing for malicious input to be stored and executed. Recommendatio...

CVE-2016-10968

The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-save privilege escalation...

CVE-2016-10968: Improper Privilege Management

The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-save privilege escalation...

PT-2019-7761

Name of the Vulnerable Software and Affected Versions PeepSo Core plugin versions prior to 1.6.1 Description The issue concerns a privilege escalation in the PeepSoProfilePreferencesAjax-save function. Recommendations For PeepSo Core plugin versions prior to 1.6.1, update to version 1.6.1 or late...

PT-2019-12838

Name of the Vulnerable Software and Affected Versions SlickQuiz plugin for WordPress versions through 1.3.7.1 Description A stored XSS issue was discovered, allowing unauthenticated users to submit malicious data via the /wp-admin/admin-ajax.php endpoint, specifically through the save quiz score...