CVE-2018-20859

CVE-2018-20859 affects the Open edX platform (edx-platform). It describes an XSS vulnerability: edx-platform before 2018-07-18 allows executing client-side code via a response to a Chemical Equation advanced problem. The root cause is lack of proper validation of client data in the web applicatio...

WordPress Advanced CF7 DB SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Advanced CF7 DB is a contact form plugin used in it. A SQL injection vulnerability exists in WordPress Vsourz Digital Advanced CF7 DB...

CVE-2019-13571

CVE-2019-13571 is a SQL injection vulnerability in the WordPress plugin Vsourz Digital Advanced CF7 DB, affecting versions up to 1.6.1. The issue allows a remote attacker to execute arbitrary SQL commands on the affected site. Multiple connected sources corroborate the vulnerability details and i...

WordPress Advanced Contact form 7 DB plugin <= 1.6.1 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong in WordPress Advanced Contact form 7 DB plugin versions = 1.6.1. Solution Update the WordPress Advanced Contact form 7 DB plugin to the latest available version at least 1.7.1...

Learn Ethical Hacking From Scratch — 2019 Training Bundle

The world of cybersecurity is fast-paced and ever-changing. New attacks are unleashed every day, and companies around the world lose millions of dollars as a result. The only thing standing in the way of cybercrime is a small army of ethical hackers. These cybersecurity experts are employed to fi...

Oracle Identity Manager Remote Security Vulnerability (Jul 2019 CPU)

The remote host is missing the July 2019 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by an unspecified vulnerability in the Advanced Console of Oracle Identity Manager, which could allow an authenticated, remote attacker via HTTP to compromise Oracle Identity...

[SECURITY] Fedora 29 Update: mutt-1.12.0-1.fc29

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

Oracle Fusion Middleware Identity Manager Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Identity Manager is one of the enterprise identity management system components. A security...

The vulnerability of Cisco AMP’s security tools for end devices stems from insufficient checks on dynamically loaded modules, allowing attackers to execute arbitrary code with AMP service privileges.

The vulnerability of Cisco AMP’s security tools for end devices stems from insufficient checks on dynamically loaded modules. Exploiting this vulnerability could allow attackers to execute arbitrary code with AMP service privileges...

SAP HANA Extended Application Services External Entity Injection Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions to support users to query real-time business data query and analysis.Extended Application Services is an application server, Web server and SAP HANA System within the Web...

Unspecified Vulnerability in Micro Focus NetIQ Advanced Authentication Framework

Micro Focus NetIQ Advanced Authentication Framework is a two-factor authentication framework from Micro Focus UK. An unspecified vulnerability exists in Micro Focus NetIQ Advanced Authentication Framework versions prior to 6.0. An attacker could exploit this vulnerability to conduct a...

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

CVE-2019-11650

CVE-2019-11650 concerns NetIQ Advanced Authentication Framework. The affected product is NetIQ Advanced Authentication Framework, with MITM vulnerability reported in versions prior to 6.0. The root cause and specifics beyond the affected version range aren’t detailed in the provided documents. Th...

F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2019-30622)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in F5 BIG-IP AFM and PEM, which can be exploited by an attacker to execute...

CVE-2019-1932 Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability

A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...

The Logic of a Classic Advanced Persistent Threat Attack

By David Balaban Story of an Advanced Persistent Threat attack against a large corporation that started with a series of blank emails. Advanced persistent threats APTs are increasingly targeting enterprise networks nowadays. This article highlights a recent attack against a large, well-protected...

Siemens SIMATIC Teleservice Adapter IE Advanced 6ES7972-0EA00-0XA0

Binary data 764660.prm...

Cisco Advanced Malware Protection for Endpoints for Windows Command Injection Vulnerability

Cisco Advanced Malware Protection AMP for Endpoints for Windows is a Windows-based endpoint security solution from Cisco. The product mainly has advanced threat prevention, monitoring and response features. A command injection vulnerability exists in Cisco?AMP for Endpoints 6.2.3.10807030519 and...

CVE-2019-6639

On BIG-IP AFM, PEM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting XSS issue. This is a control plane issue only and is not...

Digital License Plates

They're a thing: Developers say digital plates utilize "advanced telematics" -- to collect tolls, pay for parking and send out Amber Alerts when a child is abducted. They also help recover stolen vehicles by changing the display to read "Stolen," thereby alerting everyone within eyeshot. This mak...