Making a Gmail bot with Apps Script and TypeScript

Google Apps Script is one of the best hidden features of Gmail. Did you ever want just a bit more flexibility from a filter? Maybe the ability to remove a label, or match on a header, or just decide the order they are applied in. Apps Script can do all that and then some. They are simple JavaScri...

PT-2018-9781 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A CSRF issue allows deletion of any article via the "index.php?m=content&f=content&v=recycle delete" endpoint. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix fo...

cmcid.pt XSS vulnerability

Open Bug Bounty ID: OBB-604565 Description| Value ---|--- Affected Website:| cmcid.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-2774

CVE-2018-2774 affects Oracle PeopleSoft Enterprise PT PeopleTools, subcomponent SQR, in versions 8.54, 8.55, and 8.56. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to perform unauthorized update/insert/delete operations and read data, with a partial denial of ...

CVE-2018-2774

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: SQR. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2793

CVE-2018-2793 affects Oracle PeopleSoft Enterprise PeopleTools PsAdmin in PeopleSoft versions 8.54–8.56. An unauthenticated attacker with logon to the infrastructure hosting PeopleTools can gain unauthorized access to data; CVSSv3 base score 6.2 (Confidentiality High). Root cause details are desc...

CVE-2018-0017

A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...

Design/Logic Flaw

A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...

CVE-2018-0017

CVE-2018-0017 is a vulnerability in Junos OS on SRX devices with NAT-PT that allows a valid IPv6 packet to crash the flowd daemon, causing a potential extended DoS. Affected are Junos OS releases: 12.1X46 before 12.1X46-D72; 12.3X48 before 12.3X48-D55; 15.1X49 before 15.1X49-D90. The connected Ne...

CVE-2018-0017 SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT

A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...

ifm2018.pt XSS vulnerability

Open Bug Bounty ID: OBB-598347 Description| Value ---|--- Affected Website:| ifm2018.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pt-media.groupe-psa.com XSS vulnerability

Open Bug Bounty ID: OBB-585123 Description| Value ---|--- Affected Website:| pt-media.groupe-psa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

CVE-2017-5786 describes a local Unauthorized Data Modification vulnerability in HP/ HPE OfficeConnect Network Switches, affected in PT.02.01 including PT.01.03–PT.01.14. The flaw allows an attacker with local access and low privileges to modify data (I: HIGH, C: NONE, A: NONE) without user intera...

pt-sw.de XSS vulnerability

Open Bug Bounty ID: OBB-559183 Description| Value ---|--- Affected Website:| pt-sw.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on I...

pt.aviewfrommyseat.com XSS vulnerability

Open Bug Bounty ID: OBB-554254 Description| Value ---|--- Affected Website:| pt.aviewfrommyseat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-3621 · At&T +4 · Graphviz +4

Name of the Vulnerable Software and Affected Versions: Graphviz version 2.40.1 Description: The issue is related to a NULL pointer dereference vulnerability in the rebuild vlists function in lib/dotgen/conc.c in the dotgen library. This vulnerability allows remote attackers to cause a denial of...

pt.anuncioo.com XSS vulnerability

Open Bug Bounty ID: OBB-451792 Description| Value ---|--- Affected Website:| pt.anuncioo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

SOC Forum 2017: How I Learned to Stop Worrying and Love Massive Malware Attacks

Today I spoke at SOC Forum 2017 in Moscow. It was a great large-scale event about Security Operation Centers. 2,700 people registered. Lots of people in suits . And lots of my good fellows. The event was held in Radisson Royal Congress Park. There were three large halls for presentations and a hu...

CVE-2017-10351

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...