PT-2019-13746

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 5.6.9 Description An issue allows stored XSS in the body of an Article, which is executed when a victim opens articles received through mail. The Article can be formed by an attacker using the Knowledge Base feature...

CVE-2019-14548: Improper Neutralization of Input During Web Page Generation

An issue was discovered in EspoCRM before 5.6.9. Stored XSS in the body of an Article was executed when a victim opens articles received through mail. This Article can be formed by an attacker using the Knowledge Base feature in the tab list. The attacker could inject malicious JavaScript inside...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Meet the MSRC at Black Hat 2019

We’re getting close to Black Hat, and we hope to see you there. Here’s where you can find members of the Microsoft Security Response Center if you’d like to say hello, ask a question about a report you made, discuss a recent blog article, or just show us pictures of your dog...

Nagios XI Magpie_debug.php Root Remote Code Execution Exploit

This Metasploit module exploits two vulnerabilities in Nagios XI 5.5.6. One allows for unauthenticated remote code execution and another allows for local privilege escalation. When combined, these two vulnerabilities give us a root reverse shell. This module requires Metasploit:...

CVE-2018-16248

b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows remote attackers to inject arbitrary Web scripts or HTML via a carefully crafted site name in an admin-authenticated HTTP request...

Azure File Sync Agent v7.0 Release – June 2019 (KB4490495)

Update for Azure File Sync agent version 7.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v7.0 Release – June 2019 (KB4490495)

Update for Azure File Sync agent version 7.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

2019-06 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x86-based Systems (KB4503308)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-06 Security Update for Adobe Flash Player for Windows 10 Version 1803 for ARM64-based Systems (KB4503308)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-06 Security Update for Adobe Flash Player for Windows 10 Version 1903 for ARM64-based Systems (KB4503308)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-06 Security Update for Adobe Flash Player for Windows 10 Version 1809 for x64-based Systems (KB4503308)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-06 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4503308)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-06 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x86-based Systems (KB4503308)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-06 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4503286)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2019-11226

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

CVE-2019-11226

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

CVE-2019-11226

CVE-2019-11226 : CMS Made Simple 2.2.10 contains a cross-site scripting (XSS) vulnerability reachable via the m1_name parameter in the Add Article workflow under Content → Content Manager → News. Several sources describe this as an XSS issue (some references note authenticated, persistent XSS beh...

CVE-2019-11226: Improper Neutralization of Input During Web Page Generation

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

PT-2019-12201

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.10 Description The issue allows for XSS via the m1 name parameter in the "Add Article" section under Content - Content Manager - News. Recommendations For CMS Made Simple version 2.2.10, update to a version that fix...