4072 matches found
December 11, 2018—KB4471324 (OS Build 17134.471)
None None...
App Shortcuts with Receiver for Windows
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. As a Receiver administrator, you can configure Receiver for Windows 4.x to automatically place...
Responsive Menus - Moderately critical - Cross site scripting - SA-CONTRIB-2018-079
This module enables you to collapse your sites main menu on mobile, and show a menu toggle button. The module doesn't sufficiently sanitize configuration settings provided by users which leads to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacke...
Parrot Security 4.3 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
Parrot 4.3 is now available for download. This release provides security and stability updates and is the starting point for the plan to develop an LTS edition of Parrot. Linux 4.18 Linux was updated to the 4.18.10 version, and linux 4.19 will be released soon. Firefox 63 Firefox 63 provides...
CVE-2018-18943
An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the dataUploaderCategoryname parameter to an admin/uploader/uploadercategories/edit URI...
Cross site scripting
An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...
When refreshing the WEM Agent, existing Start Menu items not defined through a WEM application assignment are not being deleted automatically.
When refreshing the WEM Agent, existing Start Menu items not defined through a WEM application assignment are not being deleted automatically...
Authorities search & seize properties of GTA V’s “Infamous” cheat developers
By Carolina Cheat developers are constantly under the radar of Take-Two Interactive and Rockstar Games. Both companies have previously taken legal action against cheat developers for protecting their games including the very popular Grand Theft Auto V GTA V. Last month, they launched an operation...
CVE-2018-17408
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu...
UPM 7.15.2000: With Profile Management Enabled, Blank Icons Might Appear In The Start Menu In The Published Desktops
With User Profile Management 7.15.2000 enabled,blank icons might appear in the Start menu in the published desktops. The issue occurs during second or subsequent logons. Issue is seen with Windows 10 and Windows Server 2016...
CVE-2018-16775
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...
CVE-2018-16775
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...
Cross site scripting
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...
CVE-2018-16775
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu...
CVE-2018-16775
CVE-2018-16775 affects Victor CMS up to 2018-05-10, with a reflected/Stored XSS via the site name in the Categories menu. The connected sources confirm the vulnerability type but do not specify affected versions, patch availability, or exploitation status. The documents do not provide remediation...
The vulnerability of the components menu_pxc.cgi and index.cgi of the microprogramming system for controlled switches from FL SWITCH by Phoenix Contact allows a hacker to execute arbitrary code or cause malfunctions during maintenance.
The vulnerability of the components menupxc.cgi and index.cgi of the microprogramming software for controlled switches from FL SWITCH Phoenix Contact arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary...
CVE-2018-16338
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic...
PuppyCMS Cross-Site Scripting Vulnerability
puppetCMS is a lightweight PHP-based content management system. A cross-site scripting vulnerability exists in puppyCMS version 5.1. A remote attacker can exploit this vulnerability by executing JavaScript code in the 'Add Page/URL' URL link field of the menu.php file...
EKFiddle - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General
A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...