9398 matches found
admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2019-16865 via pillow (4.1.1)
pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2019-16865 Source advisory: OSV:PYSEC-2019-110...
CryptonDie - A Ransomware Developed For Study Purposes
CryptonDie is a ransomware developed for study purposes. Options --key key used to encrypt and decrypt files, default is random stringrecommended --dir Home directory for the attack, default is / --encrypt Encrypt all files --decrypt Decrypt all files --verbose Active verbose mode, default is Fal...
How Trump’s Ukraine Mess Entangled CrowdStrike
A US cybersecurity company became a topic of interest for President Donald Trump in his call with Ukraine’s Volodymyr Zelensky...
CVE-2019-16661
Ogma CMS 0.5 has XSS via creation of a new blog...
CVE-2019-16661
Ogma CMS 0.5 has XSS via creation of a new blog...
Cross site scripting
Ogma CMS 0.5 has XSS via creation of a new blog...
CVE-2019-16661
Ogma CMS 0.5 has XSS via creation of a new blog...
CVE-2019-16661
CVE-2019-16661 affects Ogma CMS 0.5 and describes an XSS vulnerability that occurs during the creation of a new blog. The connected documents do not provide specifics on the exact vector, payload, affected components, root cause, or a published remediation. Therefore, the exact nature of the flaw...
CVE-2019-16661: Improper Neutralization of Input During Web Page Generation
Ogma CMS 0.5 has XSS via creation of a new blog...
PT-2019-14747
Name of the Vulnerable Software and Affected Versions Ogma CMS version 0.5 Description The issue allows for XSS via the creation of a new blog. Recommendations For Ogma CMS version 0.5, update to a version that includes a fix for this issue, if available. At the moment, there is no information...
Friday Squid Blogging: Piglet Squid
Another piglet squid video. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Chun brother technology blog team easy enterprise show integration 70C scene show source code system has SQL injection vulnerabilities
Chun brother technology blog team is committed to sharing station building technology, micro letter development technology, custom development business source code system, custom development enterprise website, is a service small and medium-sized webmaster enterprise technology-based independent...
Chun technical blog team easy enterprise show integration 70C scene show source code system has unauthorized access vulnerability
Chun brother technology blog team is committed to sharing station building technology, micro letter development technology, custom development business source code system, custom development enterprise website, is a service small and medium-sized webmaster enterprise technology-based independent...
CVE-2019-10073
The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616...
PT-2019-11417
Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 16.11.06 Description: The issue affects the "Blog", "Forum", "Contact Us" screens of the "ecommerce" application template in Apache OFBiz, making them susceptible to Stored XSS attacks. Recommendations: For...
CVE-2019-10073: Improper Neutralization of Input During Web Page Generation
The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616...
The Windows 10 Privacy Settings You Should Check Right Now
Whether you're new to Windows 10 or have been using it for years, take a minute to lock down your privacy...
Friday Squid Blogging: Squid Perfume
It's not perfume for squids. Nor is it perfume made from squids. It's a perfume called Squid, "inspired by life in the sea." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Why 'Zero Day' Android Hacking Now Costs More Than iOS Attacks
Brokers of so-called zero day exploits are paying out more for Android than iOS—which would have been unthinkable until recently...
ChaosPro 2.0 SEH Buffer Overflow
!C:\Python27\python.exe Title : ChaosPro 2.0 Twitter : @securitychops Blog Post : https://securitychops.com/2019/08/24/retro-exploit-series-episode-one-chaospro-3-1.html this needs to be a backwards jump to give us room to call stack jump code jmpback80 = "\x40\x75\x80\x75" jmpforward06 =...