12124 matches found
[SECURITY] Fedora 29 Update: exim-4.92.2-1.fc29
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
PSF-2019-5 email.utils.parseaddr mistakenly parse an email
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To header...
herts.ac.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-955841 Security Researcher Mike777 Helped patch 66 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting herts.ac.uk website and its...
[SECURITY] [DLA 1909-1] freetype security update
Package : freetype Version : 2.5.2-3+deb8u4 CVE ID : CVE-2015-9381 CVE-2015-9382 CVE-2015-9383 Several newly-referenced issues have been fixed in the FreeType 2 font engine. CVE-2015-9381 heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c CVE-2015-9382 buffer over-read in...
Opencart 3.x - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Opencart 3.x.x Authenticated Stored XSS Exploit Author: Nipun Somani Author Web: http://thehackerstore.net Vendor Homepage: https://www.opencart.com/ Software Link: https://github.com/opencart/opencart Version: 3.x.x Tested on:...
Opencart 3.x - Cross-Site Scripting
Exploit Title: Opencart 3.x.x Authenticated Stored XSS Date: 08/15/2019 Exploit Author: Nipun Somani Author Web: http://thehackerstore.net Vendor Homepage: https://www.opencart.com/ Software Link: https://github.com/opencart/opencart Version: 3.x.x Tested on: Debian 9, Windows 10 x64 CVE :...
compat security update
CentOS Errata and Security Advisory CESA-2019:2051 An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
[SECURITY] Fedora 29 Update: sleuthkit-4.6.7-1.fc29
The Sleuth Kit TSK is a collection of UNIX-based command line tools that allow you to investigate a computer. The current focus of the tools is the file and volume systems and TSK supports FAT, Ext2/3, NTFS, UFS, and ISO 9660 file systems...
[SECURITY] Fedora 30 Update: sleuthkit-4.6.7-1.fc30
The Sleuth Kit TSK is a collection of UNIX-based command line tools that allow you to investigate a computer. The current focus of the tools is the file and volume systems and TSK supports FAT, Ext2/3, NTFS, UFS, and ISO 9660 file systems...
Ubuntu 16.04 LTS / 18.04 LTS : Dovecot regression (USN-4110-3)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4110-3 advisory. USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a regression causing a wrong check. This update fixes the problem. We apologize for...
Ubuntu: Security Advisory (USN-4110-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Prototype Pollution in set-value
Versions of set-value prior to 3.0.1 or 2.0.1 are vulnerable to Prototype Pollution. The set function fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects...
Joomla AlphaContent 3. SQL Injection
Exploit Title : Joomla 1.5.26 ComAlphaContent Components 3.x SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : bestofjoomla.com - joomla.org - pensieroliquido.com Software Information Link :...
CVE-2019-15492
openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21...
Cross site scripting
openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21...
CVE-2019-15492
OpenITCOCKPIT is affected by CVE-2019-15492: before version 3.7.1 it is vulnerable to reflected XSS (RVID 3-445b21). Impact described as cross-site scripting could allow an attacker to execute client-side code in the context of an authenticated user. The public references indicate a fixed release...
Modifying a Tesla to Become a Surveillance Platform
From DefCon: At the Defcon hacker conference today, security researcher Truman Kain debuted what he calls the Surveillance Detection Scout. The DIY computer fits into the middle console of a Tesla Model S or Model 3, plugs into its dashboard USB port, and turns the car's built-in camerasĀ -- the...
Fedora 30 : kdelibs3 (2019-f9f78895c3)
This update fixes CVE-2019-14744 kconfig arbitrary shell code execution in the KDE 3 compatibility version of kdelibs used by legacy KDE 3 applications. The full list of fixes in this kdelibs3 build : - fixes CVE-2019-14744 - kconfig: malicious .desktop files and others would execute code. KConfi...
Fedora Update for kdelibs3 FEDORA-2019-9f2ee52c88
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...