9598 matches found
Design/Logic Flaw
Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...
UBUNTU-CVE-2018-1000089
Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOKAUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be exploitable via If you have exposed your...
sigma - Generic Signature Format for SIEM Systems
Generic Signature Format for SIEM Systems. What is Sigma? Sigma is a generic and open signature format that allows you to describe relevant log events in a straight forward manner. The rule format is very flexible, easy to write and applicable to any type of log file. The main purpose of this...
NetIQ Sentinel Information Disclosure Vulnerability (CNVD-2018-06631)
NetIQ Sentinel is a security information and event management SIEM solution from US-based NetIQ. The solution collects, stores and analyzes log data and reports on it, as well as analyzing security event data in real time. A security vulnerability exists in NetIQ Sentinel versions prior to 8.1.x...
CVE-2018-7675
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...
Vanilla: A user can create an event in a group without being in it http://littleguy.vanillastaging.com/
Hello again, I have found another failure other than the 321405 report, in this failure a user can create an event in a group in which he is not. PoC === I've use two accounts. With the first one I created the following groups F268608 User B has joined the group Hello, therefore creates an event ...
Advanced Network Monitoring & MITM Attack Framework: Bettercap
Evil socket just announced the release of the second generation of bettercap , a complete re-implementation of the most complete and advanced Man-in-the-Middle attack framework. This release not only brings MITM attacks to the next level, but it aims to be the reference framework for network...
Fedora 26 : qt5-qtwebengine (2018-c0d3db441f)
This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes : - Security fixes from Chromium up to version 64.0.3282.140. Including:...
VIDEO: Cybersecurity Trends: A Look Back on 2017 and Key Predictions for 2018
Editor's Note: This article originally appeared on BizTechMagazine.com. The security landscape is constantly changing and 2017 had some major sea changes for IT on the security front. BizTech Magazine spoke with Rick McElroy and Paul Drapeau from Carbon Black to get their take on what the notable...
Fedora 27 : qt5-qtwebengine (2018-e08d828ed9)
This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes : - Security fixes from Chromium up to version 64.0.3282.140. Including:...
Syslog Events Not Recorded on Syslog Page of NetScaler MAS
Syslog events not recorded on syslog messages page of NetScaler MAS...
Qualys Cloud Platform 2.32 New Features
This release of the Qualys Cloud Platform version 2.32 includes updates and new features for AssetView, EC2 Connector, File Integrity Monitoring, Indication of Compromise, Security Assessment Questionnaire, Web Application Scanning, and Web Application Firewall, highlights as follows. Post update...
Passing the Online Torch from Rio to PyeongChang
Lighting the Olympic flame marks the beginning of the Olympic Games, commemorating the ancient Greek myth of Prometheus stealing fire from Zeus, and connecting the Games to its predecessors. The lighting ceremony has provided some of the Olympic Games' most iconic moments, such as Muhammad Ali...
stalbansnth.vic.edu.au XSS vulnerability
Open Bug Bounty ID: OBB-563972 Description| Value ---|--- Affected Website:| stalbansnth.vic.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
events-azalea.outpace.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-561536 Description| Value ---|--- Affected Website:| events-azalea.outpace.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
CVE-2018-6585
SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filtercreator or filtereventscat parameter...
Sql injection
SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filtercreator or filtereventscat parameter...
CVE-2018-6585
SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filtercreator or filtereventscat parameter...
Joomla! JTicketing 2.0.16 SQL Injection
Exploit Title: Joomla! Component JTicketing 2.0.16 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://techjoomla.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/jticketing/ Version: 2.0.16 Category: Webapps Tested on:...
Joomla! Component JTicketing 2.0.16 - SQL Injection
Joomla! Component JTicketing 2.0.16 - SQL Injection Exploit Title: Joomla! Component JTicketing 2.0.16 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://techjoomla.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/jticketing/ Versio...