9599 matches found
[SECURITY] Fedora 29 Update: php-horde-kronolith-4.2.25-1.fc29
Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management iCalendar/iTip, free/busy management, resource management,...
Cb Integrations: Cb Response Timeliner
Editor's Note: This post originally appeared on StillzTech.com and is being republished with permission from the author. Github: Incident Response is a challenging career. As responders, we must do our best to keep up to date with the latest attack trends, malware and forensic techniques...
Debian DLA-1531-1 : linux-4.9 security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2018-6554 A memory leak in the irdabind function in the irda subsystem was discovered. A local user can take advantage of this flaw to cause a deni...
CVE-2017-11176
creationtimestamp| type| source ---|---|--- 2018-10-02 17:05:19+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4487 2018-10-31 09:28:40+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/21674 2019-12-31 22:20:59+00:00| published-proof-of-concept|...
Running a security awareness program
So, you've finally convinced management of the need for security awareness training. What next? I’ve been performing security awareness training for around 10 years, and doing it full time here at PTP for the last 3 and a half years. From the thousands of sessions I have run I’ve found the most...
October is National Cybersecurity Awareness Month
October is National Cybersecurity Awareness Month NCSAM. NCSAM is a collaborative effort between DHS and its public and private partners—including the National Cyber Security Alliance NCSA—to raise awareness about the vital role cybersecurity plays in the lives of U.S. citizens. NCCIC will be...
Foxit PDF Reader JavaScript page change remote code execution vulnerability
Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...
Fedora 27 : mozilla-noscript (2018-09c51bbcec)
Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...
Foxit Reader CheckBox Mouse Exit Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Mou...
Foxit Reader Barcode Calculate Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...
Foxit Reader TextBox Calculate Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Foxit Reader TextBox Format Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Foxit Reader CheckBox onFocus Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
nrg-events.com XSS vulnerability
Open Bug Bounty ID: OBB-680275 Description| Value ---|--- Affected Website:| nrg-events.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-16515
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation...
CVE-2018-16515
Matrix Synapse prior to 0.33.3.1 is vulnerable to remote spoofing of events due to improper transaction and event signature validation. The issue affects Matrix Synapse kernels where an attacker could spoof events and possibly trigger unspecified impacts. Remediation is to upgrade to version 0.33...
CVE-2006-4842
creationtimestamp| type| source ---|---|--- 2018-09-17 22:21:29+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/libnsprnsprlogfileprivesc.rb 2018-09-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45433 2025-02-06...
ishapon.events.pixnet.net XSS vulnerability
Open Bug Bounty ID: OBB-671734 Description| Value ---|--- Affected Website:| ishapon.events.pixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
