Security Bulletin: A vulnerability in IBM Java Runtime affect Financial Transaction Manager for Corporate Services (CVE-2019-4732)

Summary There is vulnerability in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for Corporate Services. Financial Transaction Manager for Corporate Services FTM CPS has addressed the applicable CVE.brIf you run your own Java code using the IBM Java Runtime deliver...

Rabid - A CLI Tool And Library Allowing To Simply Decode All Kind Of BigIP Cookies

RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI @noraj...

CVE-2019-6190

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...

PT-2020-11195

Name of the Vulnerable Software and Affected Versions Lenovo Desktop, Desktop - All in One, and ThinkStation BIOS affected versions not specified Description A potential denial of service issue affects various versions of BIOS for Lenovo products, including Desktop, Desktop - All in One, and...

CVE-2013-5988

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

Cross site scripting

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

CVE-2013-5988

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

CVE-2013-5988

The CVE-2013-5988 entry concerns an XSS vulnerability in the All in One SEO Pack WordPress plugin (pre-2.0.3.1) exposed via the Search parameter. Affected software is the All in One SEO Pack WordPress plugin; vulnerable component is the Search parameter handling in versions before 2.0.3.1. The ro...

CVE-2013-5988: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...

PT-2020-7535

Name of the Vulnerable Software and Affected Versions: All in One SEO Pack plugin versions prior to 2.0.3.1 Description: A Cross-site Scripting XSS issue exists in the plugin via the Search parameter. This allows for potential malicious script execution. Recommendations: For versions prior to...

url.hqhl.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1087920 Security Researcher g0bl1nsec Helped patch 3735 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting url.hqhl.net website and...

CVE-2020-6768

A path traversal vulnerability in the Bosch Video Management System BVMS NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affect...

Authentication flaw

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

MMS All Software Unauthorized Access

The vulnerability of the MMS All software component for Oracle Hospitality Cruise Materials Management is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...

CVE-2019-3683

The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete...

Oracle Hospitality Cruise Materials Management Unauthorized Access Vulnerability

Oracle Hospitality Cruise Materials Management gives shore management complete transparency and control over all consumables required for cruise ship operations. An unspecified vulnerability exists in the MMS All component in Oracle Hospitality Cruise Materials Management 7.30.567. An attacker...

XSS Vulnerability in Microplatform All-in-One System

SenDong Micro platform all-in-one station building system is the first all-in-one station building system based on SAAS architecture. XSS vulnerability exists in SenDong Micro platform all-in-one website builder system, which can be exploited by attackers to obtain website cookie information...