259 matches found
Tumblr Patches A Flaw That Could Have Exposed Users' Account Info
Tumblr today published a report admitting the presence of a security vulnerability in its website that could have allowed hackers to steal login credentials and other private information for users' accounts. The affected information included users email addresses, protected hashed and salted...
blogs.studentlife.utoronto.ca XSS vulnerability
Open Bug Bounty ID: OBB-679387 Description| Value ---|--- Affected Website:| blogs.studentlife.utoronto.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Vote for Malwarebytes Labs: European Security Blogger Awards 2018
It's nearly time for Infosec Europe 2018, and that means it's also time to consider voting for your favourite security blogs, podcasts, video channels, and more for the upcoming European Security Blogger Awards. Thanks to your generous votes, we've been fortunate enough to pick up the award for...
Moodle 2.x / 3.x Multiple Vulnerabilities (May 2017) - Linux
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
randoblog.skynetblogs.be XSS vulnerability
Open Bug Bounty ID: OBB-561252 Description| Value ---|--- Affected Website:| randoblog.skynetblogs.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
art-manias.blogs.elle.es XSS vulnerability
Open Bug Bounty ID: OBB-528647 Description| Value ---|--- Affected Website:| art-manias.blogs.elle.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
honeydressing.blogs.elle.es XSS vulnerability
Open Bug Bounty ID: OBB-528617 Description| Value ---|--- Affected Website:| honeydressing.blogs.elle.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
blogs.microsoft.co.il XSS vulnerability
Open Bug Bounty ID: OBB-447424 Description| Value ---|--- Affected Website:| blogs.microsoft.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross-site Scripting (XSS)
Moodle is vulnerable to cross-site scripting XSS attacks. These attacks are possible because links to external blogs are not being sanitized...
Moodle 3.0.x < 3.0.10 Multiple Vulnerabilities
Binary data 700124.prm...
Moodle 3.2.x < 3.2.3 Multiple Vulnerabilities
Binary data 700126.prm...
Design/Logic Flaw
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...
UBUNTU-CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...
CVE-2017-7489
CVE-2017-7489 affects Moodle 2.x and 3.x. The issue allows remote authenticated users to take ownership of arbitrary blogs by editing an external blog link. The connected sources reiterate Moodle as the affected software and the blog-edit capability as the vulnerability trigger; no explicit patch...
Atlassian Confluence 6.0.x < 6.0.7 Drafts diff REST Information Disclosure
According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.0.x prior to 6.0.7. It is, therefore, affected by an information disclosure vulnerability in the Confluence drafts diff REST resource due to making available the page IDs or draft I...
Atlassian Confluence Authentication Bypass Vulnerability
Atlassian Confluence is a professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing between team members. Atlassian Confluence suffers from an...