Shopify: Shopify's SF and LA offices Dashboard Information disclosed via Public Gist

Hi Team, During my recon process, I found a public gist containing the Internal Information of the Shopify offices of LA and SF. The gist belongs to the Shopify employee - https://gist.github.com/runmad He is currently - Engineering Manager at Shopify LA Office Dashboard -...

November 6, 2018, update for Office 2013 (KB3178640)

November 6, 2018, update for Office 2013 KB3178640 This article describes update 3178640 for Microsoft Office 2013 that was released on November 6, 2018. This update also applies to Office Home and Student 2013 RT. Be aware that the update in the Microsoft Download Center applies to the Microsoft...

tracking.conventioncalendar.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-998575 Security Researcher 0xNoOne Helped patch 12 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting tracking.conventioncalendar.com website and its users...

The vulnerability of the parser_get_next_char function in iCal calendar software for email processing in Thunderbird software relates to the occurrence of operations outside the buffer in memory. This vulnerability allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the parsergetnextchar function in iCal calendar software for email processing in Thunderbird is related to buffer overflows in dynamic memory during message processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

Open-Xchange OX App Suite SSRF / XSS / Information Disclosure / Access Controls

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely...

Description of the security update for SharePoint Server 2019: October 8, 2019

None None...

Unspecified Vulnerability in CloudBees Jenkins Google Calendar Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Google Calendar Plugin is used in one of the...

The vulnerability of the fly-admin-date component in the FLY operating system environment of Astra Linux, due to insufficient input data validation, allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-date component in the FLY environment of the Astra Linux operating system is related to a calendar synchronization error due to ntp. Exploiting this vulnerability allows a remote attacker to cause service failures...

CVE-2019-10425

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10425

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

Design/Logic Flaw

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10425

The CVE-2019-10425 entry concerns the Jenkins Google Calendar Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue allows users with Extended Read permission or with access to the master file system to view these credentials. The ava...

CVE-2019-10425

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

PT-2019-11819 · Jenkins · Jenkins Google Calendar Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Google Calendar Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master. Specifically, the Google Calendar Plugin stores ...

Google Calendar Settings Gaffes Exposes Users' Meetings, Company Details

Google has come under fire for a configuration setting tied to its Google Calendar service, which has left hundreds of calendars inadvertently open to the public – and could potentially expose billions more. It’s important to note that no actual vulnerability exists in the settings of Google...

Thousands of Google Calendars Possibly Leaking Private Information Online

"Warning — Making your calendar public will make all events visible to the world, including via Google search. Are you sure?" Remember this security warning? No? If you have ever shared your Google Calendars, or maybe inadvertently, with someone that should not be publicly accessible anymore, you...

WordPress The Events Calendar Plugin < 4.8.2 XSS Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress My Calendar Plugin < 3.1.10 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113506";...

Spam In your Calendar? Here’s What to Do.

Many spam trends are cyclical: Spammers tend to switch tactics when one method of hijacking your time and attention stops working. But periodically they circle back to old tricks, and few spam trends are as perennial as calendar spam, in which invitations to click on dodgy links show up unbidden ...

WordPress my-calendar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-calendar is a calendar customization plugin that is used in it. A cross-site scripting vulnerability exists in the WordPress...