9398 matches found
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
Cross site scripting
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
Easy File Sharing Web Server 7.2 Local Buffer Overflow
Exploit Title: Easy File Sharing Web Server 7.2 - SMTP 'Password' Local Buffer Overflow SEH Date: 03/16/2020 Author: Felipe Winsnes Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/download.php Version: 7.2 Tested on: Windows 7 Proof of Concept: 1.- Run the...
PT-2020-10492
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "blog/" URI. This means an attacker can inject malicious code into the PATH INFO variable, potentially leading to the execution of unauthorized...
CVE-2019-20516: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
The Value and Ethics of Using Phone Data to Monitor Covid-19
Google and Facebook are discussing plans with the White House to share collective data on people's movements during the coronavirus pandemic...
CVE-2019-20511
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
CVE-2019-20511
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
Design/Logic Flaw
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
CVE-2019-20511
CVE-2019-20511 affects ERPNext 11.1.47 and is described as a Frame Injection vulnerability via the blog?blog_category parameter. Red Hat/CNVD-style entries corroborate an injection issue stemming from insufficient input validation on user-supplied data; ERPNext’s styling of a blog category parame...
PT-2020-10487
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for frame injection via the blog category parameter. This can be exploited through the "blog?blog category=" endpoint. The blog category parameter is vulnerable to injection. Recommendations...
CVE-2019-20511: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
Change the Rules Speaker Event
Akamai's Women's Forum Americas, OHANA and In Reach Employee Resource Groups recently hosted Cross ERG 'Change the Rules' Keynote - Celebration of Black History Month in our Chicago office. We were excited to have notable Michelle Silverthorn, CEO of Inclusion Nation, a company that focuses on...
Despite Coronavirus, Washington Isn't Worried About Its Primary
The state conducts its elections almost entirely by mail. The rest of the country should pay attention...
Arbitrary File Deletion Vulnerability in Catfish Blog
Catfish Blog is a free personal blogging system. Catfish Blog suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files on the operating system...
Quick wins—single sign-on (SSO) and Multi-Factor Authentication (MFA)
With Multi-Factor Authentication MFA and single sign-on SSO being a few of the most effective countermeasures against modern threats, organizations should consider a Cloud Identity as a Service IDaaS, and MFA solution, like Azure Active Directory AD. Here are seven benefits: 1. Azure AD is simple...
@jatahworx/bhive-core (>=5.0.0, <=7.1.0), aext-scripts (>=0.23.1, <=1.0.7) +6 more potentially affected by CVE-2019-15609 via kill-port-process (>=0.0.4, <=2.1.0)
kill-port-process NPM version =0.0.4, =5.0.0, =0.23.1, =0.0.1, =0.0.1-test.0, =0.0.30, =0.0.29, =0.0.1, =1.5.0 Source cves: CVE-2019-15609 Source advisory: MEND:CVE-2019-15609...
SQL Injection Vulnerability in in***.php File of Nameless Light Blog
Nameless Light Blog is an easy-to-use personal light blogging system MicroBlog based on PHP and Sqlite platforms. SQL injection vulnerability exists in the in.php file of Nameless Light Blog. An attacker can exploit the vulnerability to obtain sensitive database information...
