1275 matches found
PT-2017-11056
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue affects the Discussion Forum subcomponent of PeopleSoft Enterprise PRTL Interaction Hub, allowing a low-privileged attacker with network access via HTTP to compromi...
Splitting the NSA and US Cyber Command
Rumor is that the Trump administration will separate the NSA and US Cyber Command. I have long thought this was a good idea. Here's a good discussion of what it does and doesn't mean...
Oracle PeopleSoft Enterprise PRTL Interaction Hub Remote Vulnerability (CNVD-2017-27314)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...
Introducing the Qualys New Look and Positioning
Dear Customer, Partner and Security Professional, I would like to thank all of you for your support during our ongoing journey to a world where we are making security invisible and an integrated component of the Digital Transformation of our enterprises. With your help and the dedication of our...
July 14, 2017 – Morning Cyber Coffee Headlines – “Bastille Day” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 14, 2017 - Headlines Carbon Black in the News: US Voters Consider Russia t...
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
Authorization
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
PT-2017-16255
Name of the Vulnerable Software and Affected Versions EMC RSA Archer versions 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, 5.5.3.1 Description The issue is related to an authorization bypass through a user-controlled key vulnerability in Discussion Forum Messages. A remote low-privileged attacker...
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
CVE-2017-4999
CVE-2017-4999 pertains to EMC RSA Archer across multiple 5.x releases (e.g., 5.4.1.3, 5.5.x). The vulnerability is an authorization bypass in the Discussion Forum Messages component caused by handling of input via user-controlled keys, enabling a remote, low-privileged attacker to elevate privile...
CVE-2017-4999: Exposure of Sensitive Information to an Unauthorized Actor
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other...
Cheers to a successful time at Infosec Europe 2017
With over 350 exhibitors, well over 10,000 visitors, and many widely respected speakers, Infosec Europe is one of Europe's biggest security events. The Malwarebytes stand attracted a lot of interested people, even without our robot Zero, who had obligations elsewhere. The new EMEA Channel...
BlueHat v17 Call for Papers Opens
Calling security professionals and enthusiasts throughout the world. Microsoft is pleased to open the Call for Papers for our BlueHat v17 Security Conference. Potential speakers have from June 1st through August 18th to submit abstract proposals for this unique opportunity. As in past events, we...
BlueHat v17 Call for Papers Opens
Calling security professionals and enthusiasts throughout the world. Microsoft is pleased to open the Call for Papers for our BlueHat v17 Security Conference. Potential speakers have from June 1st through August 18th to submit abstract proposals for this unique opportunity. As in past events, we...
2017 OWASP Top 10 ten security vulnerabilities the candidate out of the oven, what do you see? - Vulnerability warning-the black bar safety net
OWASP the open Web application security project recently announced 2017 the OWASP Top 10 ten security vulnerabilities list, added 2 new classification. Background description The OWASP project is the most authoritative is its”top ten security vulnerabilities list.” This list sums up the Web App...
CVE-2015-3883
Multiple cross-site scripting XSS vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 searchkeywords parameter to index.php/users page; the 2 "Name of application" on index.php/configuration; 3 a new project name on index.php/projects; 4 the task na...
Informatica: Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]
POC === 1. Under "Your Stuff" choose to "Create a Discussion/Ask a question" 2. Choose a space to submit your discussion/question. Any space will do. 3. Title your discussion with the payload " 4. Choose "Post message" to publish. 5. View the message as any user. Under "Actions" choose to "Send a...
seasonsindia.com XSS vulnerability
Vulnerable URL: http://www.seasonsindia.com/discussion/replysea.jsp?qid=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E=Beauty+%26+Fashion+ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...