8012 matches found
An intern's experience with Rust
Over the course of my internship at the Microsoft Security Response Center MSRC, I worked on the safe systems programming languages SSPL team to promote safer languages for systems programming where runtime overhead is important, as outlined in this blog. My job was to port a security critical...
Gila CMS Cross-Site Scripting Vulnerability (CNVD-2019-36960)
Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in gila-blog and gila-mag in Gila CMS 1.11.4 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
Design/Logic Flaw
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
CVE-2019-17535 affects Gila CMS up to version 1.11.4, enabling XSS in blog-list.php via the search parameter in both the gila-blog and gila-mag themes. The vulnerability stems from the same underlying issue as CVE-2019-9647, leading to potential execution of client-side code. The connected source...
MileagePlus open source blog system v2.2 has SQL injection vulnerabilities
Mile High Open Source Blog System is a blog system based on ThinkPHP development. MileagePlus Open Source Blog System v2.2 suffers from a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...
MileagePlus open source blog system V2.0 suffers from SQL injection vulnerabilities
MileagePlus Blog System is a blog system based on ThinkPHP development. MileageMi Open Source Blog System V2.0 suffers from a SQL injection vulnerability, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...
File Upload Vulnerability in b2evolution Blog System
b2evolution is a PHP MySQL development , mature , excellent Blog engine . It contains a Blog tool should have all the features . b2evolution blog system file upload vulnerability , an attacker can exploit the vulnerability to upload arbitrary files , to obtain server privileges...
U.S. Dept Of Defense: Remote Code Execution in ██████
The vulnerability you reported has been resolved and this report is now closed. If you have any further questions or disagree that the report is resolved, please let us know. Thank you for your time and effort to improve the security of the DoD information network. Thanks @s3cr3tsdn for reporting...
Exploit for CVE-2019-15846
Exim CVE-2019-15846 =================== PoC materials to exploi...
CVE-2019-15750
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
Cross site scripting
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2019-15750
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2019-15750
The CVE-2019-15750 entry is supported by multiple connected records that confirm a Cross-Site Scripting (XSS) vulnerability in SITOS six Build v6.2.1. The weakness is in the blog feature, where an attacker can supply a crafted id parameter to inject arbitrary web script or HTML. Impact is describ...
7 Cybersecurity Threats That Can Sneak Up on You
From rogue USB sticks to Chrome extensions gone wild, here is a quick guide to some basic risks you should look out for...
A US Election Phishing Attack, Quitting Vaping, and More News
Catch up on the most important news from today in two minutes or less...
CryptonDie - A Ransomware Developed For Study Purposes
CryptonDie is a ransomware developed for study purposes. Options --key key used to encrypt and decrypt files, default is random stringrecommended --dir Home directory for the attack, default is / --encrypt Encrypt all files --decrypt Decrypt all files --verbose Active verbose mode, default is Fal...