CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

Code injection

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

CVE-2018-6790

KDE Plasma Workspace (before 5.12.0) contains a vulnerability in dataengines/notifications/notificationsengine.cpp that allows remote attackers to discover a client’s IP address via a URL in a notification, demonstrated by the src attribute of an IMG element. The issue results from missing saniti...

The Evolution of Ransomware

While many businesses and individual users understand that ransomware isn't a new threat, many don't actually know how long this particular infection style has been utilized by hackers. The first attacks took place more than a decade ago, and since then, ransomware authors have only become more...

Design/Logic Flaw

Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated attackers to watch any Confluence page & receive notifications when comments are added to the watched page, and vote & watch JIRA issues that they do not have access to, although th...

CVE-2017-9513

Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated attackers to watch any Confluence page & receive notifications when comments are added to the watched page, and vote & watch JIRA issues that they do not have access to, although th...

Unidesk 2.X: Health Status: High Swap Memory Usage

In the Unidesk Management Console, you might see "Needs Attention" as the status on one or another of your appliances, and if you click the i info button, you will see "High swap memory usage." If you have e-mail notification turned on, you will get e-mailed when the condition is triggered. High...

Pool update does not complete when CPU feature set has changed

When applying a hotfix that contains CPU feature setchangesto a XenServer host or pool that has running VMs, the XenCenterInstall Update wizard might stop after installing the update on one or more of the hosts and display the following error: The host does not have some of the CPU features that...

camping1402.rssing.com XSS vulnerability

On the 19.01.2018 security researcher reported a XSS vulnerability affecting the camping1402.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 January...

kr1.hostedftp.com XSS vulnerability

On the 19.01.2018 security researcher reported a XSS vulnerability affecting the kr1.hostedftp.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 January, 201...

us4.hostedftp.com XSS vulnerability

On the 19.01.2018 security researcher reported a XSS vulnerability affecting the us4.hostedftp.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 January, 201...

1915.rssing.com XSS vulnerability

On the 18.01.2018 security researcher reported a XSS vulnerability affecting the 1915.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 January, 2018...

ensonhaber.com XSS vulnerability

On the 18.01.2018 security researcher reported a XSS vulnerability affecting the ensonhaber.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 January, 2018...

monsall.rssing.com XSS vulnerability

On the 17.01.2018 security researcher reported a XSS vulnerability affecting the monsall.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 17 January, 20...

alliance.rssing.com XSS vulnerability

On the 15.01.2018 security researcher reported a XSS vulnerability affecting the alliance.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 15 January,...

freeholder102.rssing.com XSS vulnerability

On the 15.01.2018 security researcher reported a XSS vulnerability affecting the freeholder102.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 15...

schule-test.net XSS vulnerability

On the 14.01.2018 security researcher reported a XSS vulnerability affecting the schule-test.net website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 14 January, 2018...

espnplayer.com XSS vulnerability

On the 14.01.2018 security researcher reported a XSS vulnerability affecting the espnplayer.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 14 January, 2018...

observerabout1.rssing.com XSS vulnerability

On the 11.01.2018 security researcher reported a XSS vulnerability affecting the observerabout1.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 11...

CVE-2017-9705

CVE-2017-9705 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, where the G-Link PKT driver’s concurrent rx notifications and read() operations can trigger a double-free due to missing locking. This can cause list_del() and list_add() to overlap and corru...