CVE-2017-14595: Undefined Security Weakness

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...

Hacking Robots

Researchers have demonstrated hacks against robots, taking over and controlling their camera, speakers, and movements. News article...

2017-09 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4038806)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-09 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4038806)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-09 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows Embedded 8 Standard for x64 (KB4041084)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-09 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows Embedded 8 Standard (KB4041084)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2017-11161

Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to label.php; or 2 type parameter to synotheme.php...

PT-2017-11786

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.7.4-3433 Synology Photo Station versions prior to 6.3-2968 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the article id parameter to...

SQL Injection Vulnerability in IMGCMS Attach.php and Article.php Pages

IMGCMS is a set of CMS management program focusing on the development of image-based websites. It adopts the most efficient PHP+MYSQL architecture and can run on different platforms Windows, Linux, Unix. IMGCMS Attach.php and Article.php pages are vulnerable to SQL injection. Attackers can use th...

SQL injection vulnerability in article_detal.php page of Xiamen Eltong Network Technology Co.

Eltron website builder is a website builder system. A SQL injection vulnerability exists in the articledetal.php page of the website builder system of Xiamen Eltong Network Technology Co. An attacker can exploit this vulnerability to obtain sensitive database information...

Friday Squid Blogging: Bioluminescent Squid

There's a beautiful picture of a tiny squid in this New York Times article on bioluminescence -- and a dramatic one of a vampire squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Arbitrary File Upload Vulnerability in OTCMS v2.56

Net Titanium Article Management System OTCMS is a simple and good asp article management system. OTCMS v2.56 has an arbitrary file upload vulnerability. The vulnerability is due to the background upload file did not strictly check the file content and file suffix caused by the attacker is allowed...

CVE-2016-6800

The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article field is not...

CVE-2016-6800: Improper Neutralization of Input During Web Page Generation

The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article field is not...

PT-2017-9017

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 16.11.01 Description The Apache OFBiz framework has a blog functionality that allows different users to operate blogs related to specific parties. The form fields for creating new blog articles do not properly...

TUTUCMS system admin\Article.php page order parameter has SQL injection vulnerability

TUTUCMS is a set of CMS management program focusing on the development of image-based websites, using PHP+MYSQL architecture, which can run on different platforms Windows, Linux, Unix. A SQL injection vulnerability exists in the order parameter of the admin\Article.php page of the TUTUCMS system...

Citrix Workspace App for Mac and Linux fail to Redirect Local printer to Citrix Sessions

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Client printers on Mac and Linux clients fail to be created in XenApp and XenDesktop sessions runnin...

2017-08 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4034662)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-08 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x86-based Systems (KB4034662)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-08 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x64-based Systems (KB4034662)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...