CVE-2018-20217

A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type single-DES, triple-DES, or RC4, the attacker can crash the KDC by making an S4U2Self request...

CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

CVE-2018-20217

A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type single-DES, triple-DES, or RC4, the attacker can crash the KDC by making an S4U2Self request...

CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

CVE-2018-20153

In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS...

WordPress: [FG-VD-18-165] Wordpress Cross-Site Scripting Vulnerability Notification II

Subject: FG-VD-18-165 Wordpress Cross-Site Scripting Vulnerability Notification II Dear Wordpress, Fortinet's FortiGuard Labs have discovered a security issue in your product Wordpress on 12/11/2018. We estimate its risk level is 3, on a scale of 1 lowest to 5 highest, in terms of its impact...

ThinkPHP 5.0.23/5.1.31 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: ThinkPHP 5.x v5.0.23,v5.1.31 Remote Code Execution Exploit Author: VulnSpy Vendor Homepage: https://thinkphp.cn Software Link: https://github.com/top-think/framework/ Version: v5.x below v5.0.23,v5.1.31 CVE: N/A Exploit...

ThinkPHP 5.x Remote Code Execution

Exploit Title: ThinkPHP 5.x v5.0.23,v5.1.31 Remote Code Execution Date: 2018-12-11 Exploit Author: VulnSpy Vendor Homepage: https://thinkphp.cn Software Link: https://github.com/top-think/framework/ Version: v5.x below v5.0.23,v5.1.31 CVE: N/A Exploit...

PHP 5.x < 5.6.39, 7.x < 7.0.33, 7.1.x < 7.1.26, 7.2.x < 7.2.14 DoS Vulnerability - Windows

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2018-19935

ext/imap/phpimap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty string in the message argument to the imapmail function...

fahrschule-schilderwald.de XSS vulnerability

Open Bug Bounty ID: OBB-707686 Description| Value ---|--- Affected Website:| fahrschule-schilderwald.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

utiglass.com XSS vulnerability

Open Bug Bounty ID: OBB-707673 Description| Value ---|--- Affected Website:| utiglass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

CVE-2018-19865

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3...

CVE-2018-19865

CVE-2018-19865: A keystroke-logging issue was discovered in Qt’s Virtual Keyboard. Affected: Qt 5.7.x–5.11.x prior to 5.11.3. Root cause: verbose keypress logging in the Virtual Keyboard. Impact: possible leakage of keystrokes; no exploit details provided in the documents. Mitigation: update to Q...

lexika.tanto.de XSS vulnerability

Open Bug Bounty ID: OBB-707527 Description| Value ---|--- Affected Website:| lexika.tanto.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

[SECURITY] Fedora 29 Update: cobbler-2.8.4-5.fc29

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

scoularnebraska.com XSS vulnerability

Open Bug Bounty ID: OBB-707467 Description| Value ---|--- Affected Website:| scoularnebraska.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

CVE-2018-7113

A security vulnerability in HPE Integrated Lights-Out 5 iLO 5 prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates...

CVE-2018-7113

CVE-2018-7113 affects HP’s Integrated Lights-Out 5 (iLO 5) prior to v1.37. The issue allows local attack to bypass firmware-update security restrictions, enabling unauthorized firmware updates. Affected component: iLO 5 firmware management; root cause: local bypass of update restrictions; impact:...