Microsoft Windows Multiple Vulnerabilities (KB4489881)

This host is missing a critical security update according to Microsoft KB4489881 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

March 12, 2019—KB4489880 (Monthly Rollup)

March 12, 2019—KB4489880 Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Improvements and fixes This security update includes improvements and fixes that were a part of update KB4487022 released February 19, 2019 and addresses the following issues: Addresses an issue in which the...

Google Patches Critical Bluetooth RCE Bug

Eleven critical Android bugs were patched as part of Google’s March Security Update. Three of them were tied to Android’s media framework and core system, while the others were related to faulty Qualcomm chip components. Out of those critical bugs, Google patched three critical remote...

Joomla Zoo by YooTheme Components SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla Zoo by YooTheme Components. An attacker can exploit this vulnerability to obtain sensitive database information...

Joomla Zoo by YooTheme Components Information Disclosure Vulnerability

Joomla is an open source content management system CMS. An information disclosure vulnerability exists in Joomla Zoo by YooTheme Components. An attacker can exploit this vulnerability to obtain sensitive information...

[SECURITY] Fedora 29 Update: jackson-parent-2.9.1.2-1.fc29

Project for parent pom for all Jackson components...

Siemens Automation License Manager Detection (Windows SMB Login)

SMB login-based detection of Siemens Automation License Manager. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Joomla! 1.0.x < 3.9.3 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - XSS in URL fields in various core components affects Joomla 2.5.0 through 3.9.2 - XSS in browserside mime-type sniffing affects Joomla 1.0.0 through 3.9.2 - "No Filtering"...

Joomla OSMap 4.2.19 Database Disclosure / SQL Injection

Exploit Title : Joomla OSMap Components 4.2.19 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : joomlashack.com Software Download Link : joomlashack.com/joomla-extensions/osmap/...

CVE-2019-7744

An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various core components could lead to an XSS vulnerability...

PT-2019-18738

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.3 Description An issue was discovered that could lead to an XSS vulnerability due to inadequate filtering on URL fields in various core components. Recommendations For versions prior to 3.9.3, update to version...

Frog CMS Information Disclosure Vulnerability

Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. An information disclosure vulnerability exists in Frog CMS. An attacker could exploit the vulnerability ...

Joomla K2 2.9.0 Database Disclosure / SQL Injection

Exploit Title : Joomla K2 Components 2.9.0 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : getk2.org Software Download Link : getk2.org/downloads/?f=K2v2.9.0.zip Software Information Link :...

Joomla Acajoom 5.1.5 SQL Injection

Exploit Title : Joomla Acajoom Components 5.1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/02/2019 Vendor Homepage : joobi.org Software Information Link : joobi.org/acajoom.html Software Version : 5.1.5 Tested On : Windows and Linux Categor...

Input validation

aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be exploitable via Remote. A crafted stanza...

Oracle Identity Analytics Unauthorized Access

The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the WLS Core Components component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data or cause service failures...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Fabric Manager

Summary There are multiple vulnerabilities in IBMR SDK JavaTM Technology Edition, Version 7 used by IBM Fabric Manager. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology...

Knowledge Management Configuration Service EPBC EPBC2 SAP NetWeaver Control

The vulnerability of the software components—Knowledge Management Configuration Service, EPBC, and EPBC2 of the SAP NetWeaver platform—is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to control the application using specially...

CVE-2019-2452

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...