XSS in doconfigurerssfeed.action

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-30240. panel Filed by vosipov on behalf of write.muhammadwaqar. code...

XSS Vulnerability in About Me field

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46695. panel Steps to reproduce: In id.atlassian.com, add to your About me: code console.log' +++++ Hi Dennis ++++++'; code Save...

XSS Vulnerability in About Me field

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46695. panel Steps to reproduce: In id.atlassian.com, add to your About me: code console.log' +++++ Hi Dennis ++++++'; code Save...

XSS Vulnerability - delete filter confirmation

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-34074. panel Similar to JRA-31564, an XSS bug exists in the delete filter success screen. Steps to reproduce: 1. Search for issues. 2. Choose...

XSS Vulnerability - delete filter confirmation

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report|http://jira.atlassian.com/browse/JRASERVER-34074. panel Similar to JRA-31564, an XSS bug exists in the delete filter success screen. Steps to reproduce: 1. Search for issues. 2. Choos...

XSS Vulnerability - delete filter confirmation

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-34074. panel Similar to JRA-31564, an XSS bug exists in the delete filter success screen. Steps to reproduce: 1. Search for issues. 2. Choose...

Hacking Google Glass with QR Code to sniff user data

Researchers at mobile security firm Lookout discovered a security flaw in Google Glass which allowed them to capture data without the user's knowledge, when the user merely took a photo that captured a malicious QR code. Lookout was able to force Google Glass to silently connect to a Wi-Fi access...

Motion 3.2.12 XSS / CSRF / Buffer Overflow / SQL Injection

Title: Motion 3.2.12 Multiple Vulnerabilities Author: xistence - xistenceat0x90.nl Date: 26/06/2013 Vendor page: http://www.lavrsen.dk/foswiki/bin/view/Motion Software link: http://www.lavrsen.dk/foswiki/bin/view/Motion/DownloadFiles Software description: Motion is a program that monitors the vid...

Stable Channel Update

The Stable channel has been updated to 27.0.1453.116 for Windows, Macintosh and Chrome Frame platforms. Security fixes and rewards: Please see the Chromium security page for more information. Note that the referenced bugs may be kept private until a majority of our users are up to date with the...

Cisco Video Surveillance Operations Manager Help Page Redirect Vulnerability

A vulnerability in the help page of the Cisco Video Surveillance Operations Manager could allow an unauthenticated, remote attacker to load remote web pages on a victim's web browser. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

Cisco Access Control Server Privilege Escalation Vulnerability

A vulnerability in the administrative web interface of Cisco Access Control Server could allow an authenticated, remote attacker to access the report view functions of the portal without being given the proper privileges. The vulnerability is due to a failure to properly secure the report view...

Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability in the Cisco WebEx Event Center module of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to gather event passwords and host keys. The vulnerability is due to a failure to authenticate some user requests. An attacker could exploit this vulnerability...

Cisco TelePresence System t-shell Denial of Service Vulnerability

A vulnerability in the t-shell implementation of Cisco TelePresence System Software could allow an authenticated, remote attacker to exhaust the available memory and create a denial of service DoS condition. The vulnerability is due to improper handling of orphaned t-shell sessions. An attacker...

Cisco Unified Communications Manager Authentication Denial of Service Vulnerability

A vulnerability in device authentication of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to impact application response. The vulnerability is due to incomplete throttling of authentication requests. An attacker could exploit this vulnerability by sendi...

Cisco Unified Presence Memory Exhaustion Vulnerability

A vulnerability in the web framework of Cisco Unified Presence could allow an unauthenticated, remote attacker to cause an increase in memory utilization. The vulnerability is due to improper handling of memory allocation when the affected system is flooded with malformed TCP packets. An attacker...

Cisco Prime Central for Hosted Collaboration Solution Directory Traversal Vulnerability

A vulnerability in Cisco Prime Central for Hosted Collaboration Solution could allow an unauthenticated, remote attacker to view system files. The vulnerability is due to insufficient path traversal prevention. An attacker could exploit this vulnerability by submitting a crafted URL. An exploit...

SPAM via Answer

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-47171. panel I have received an email notification containing a link as an aswer one of my questions. It turns out that a spam....

Cisco IOS XR Software SNMP Memory Leak Vulnerability

A vulnerability in the SNMP module of Cisco IOS XR could allow an authenticated, remote attacker to trigger a memory leak in the SNMP process. The vulnerability is due to insufficient checking of data input. An attacker could exploit this vulnerability by sending crafted SNMP packets to the devic...

Cisco ASA Software VPN Group Enumeration Vulnerability

A vulnerability in the Internet Security Association and Key Management Protocol ISAKMP implementation in Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to enumerate remote access VPN groups configured in a Cisco ASA device. The vulnerability is due...

Cisco ASA Clientless SSL VPN CIFS Denial of Service Vulnerability

A vulnerability in the implementation of the rewriter module of the Cisco Adaptive Security Appliance ASA Clientless SSL VPN could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to a race condition while accessing resources via the Commo...