Troubleshooting thin provisioning for shared block storage on XenServer

XenServer and Citrix Hypervisor use GFS2 to provide the ability to set up thin provisioning with a shared block storage device. Pools that use GFS2 to thin provision their shared block storage are clustered and behave differently to pools that use shared file-based storage or LVM with shared bloc...

Moderate: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

Aurora IDEX Membership(IDXM), ERC20 Token, allows attackers to acquire contract ownership (CVE-2018–10666)

Abstract I found a new vulnerability in smart contract of IDXM Token CVE-2018–106661. Attackers can acquire contract ownership because the setOwner function is delcared as public. A new owner can subsequently bypass intended access restrictions by, for example, calling uploadBalances. Details In...

CIS Releases 2017 Year in Review

The Center for Internet Security CIS has released its 2017 Year in Review. CIS is home to the Multi-State Information Sharing and Analysis Center MS-ISAC, an NCCIC partner focused on cyber threat prevention, protection, response, and recovery for U.S. state, local, tribal, and territorial...

UBUNTU-CVE-2017-16816

The condorschedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service daemon crash by leveraging use of GSI and VOMS extensions...

DEBIAN-CVE-2017-16816

The condorschedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service daemon crash by leveraging use of GSI and VOMS extensions...

SLiMS 8 Akasia Membership Module Cross-Site Scripting Vulnerability

SLiMS 8 Akasia is an open source, free library management system.Membership module is one of the membership management modules. A cross-site scripting vulnerability exists in the Membership module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...

Cross site scripting

Reflected Cross-Site Scripting XSS exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI...

CVE-2018-12656

Reflected Cross-Site Scripting XSS exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI...

CVE-2018-12656

Reflected Cross-Site Scripting XSS exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI...

CVE-2018-12656

Reflected Cross-Site Scripting XSS exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI...

CVE-2018-12656

Reflected Cross-Site Scripting XSS exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI...

PT-2018-11311

Name of the Vulnerable Software and Affected Versions SLiMS version 8.3.1 Description A Reflected Cross-Site Scripting XSS issue exists in the Membership module. This issue can be triggered via the /admin/modules/membership/index.php?keywords= API endpoint, where the keywords parameter is...

CVE-2018-12656: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement on identity column may cause the DB2 server to terminate abnormally. (CVE-2014-6209)

Summary IBM DB2 contains a denial of service vulnerability in which an ALTER TABLE statement on identity column may cause the DB2 server to terminate abnormally. Vulnerability Details CVE-ID: CVE-2014-6209 DESCRIPTION: IBM DB2 contains a denial of service vulnerability. A remote, authenticated DB...

Code injection

The Owned smart contract implementation for Aurora IDEX Membership IDXM, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables...

CVE-2018-10666

CVE-2018-10666 concerns the Owned smart contract implementation of Aurora IDEX Membership (IDXM). The vulnerability arises because setOwner is public, enabling an attacker to become contract owner. A new owner can then invoke functions protected by onlyOwner, potentially altering important variab...

PT-2018-10044

Name of the Vulnerable Software and Affected Versions Aurora IDEX Membership IDXM affected versions not specified Description The Owned smart contract implementation for Aurora IDEX Membership IDXM, an Ethereum ERC20 token, has a security issue. The setOwner function is declared as public, allowi...

CVE-2018-10666: Undefined Security Weakness

The Owned smart contract implementation for Aurora IDEX Membership IDXM, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables...

Zomato: [www.zomato.com] IDOR - Gold Subscription Details, Able to view "Membership ID" and "Validity Details" of other Users

Hello Zomato, The following URL : https://www.zomato.com/gold/payment-success?subscriptionid=██████████&userid=█████████ is vulnerable to IDOR in subscriptionid field. Anyone can get Subscription Start & End Date and Plan Duration of a Membership ID just by changing the subscriptionid parameter...