PT-2018-17954

Name of the Vulnerable Software and Affected Versions Abine Blur version 7.8.242 Description The issue allows attackers to bypass Multi-Factor Authentication and macOS disk-encryption protection mechanisms, resulting in the potential exfiltration of secured data. This is due to the lack of securi...

VPN 101 – Part 1: What You Need to Know to Stay Safe and Protect Your Privacy Online

Submitted by Brook Stein The Internet is a wonderful thing. But we all know there are also risks lurking around every corner. We want to protect ourselves from malware and identity theft, prevent third-party trackers and advertisers slurping our private information, and keep our kids safe when...

Debian: Security Advisory (DLA-925-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: qtpass-1.2.1-1.fc27

QtPass is a cross-platform GUI for pass, the standard Unix password manager...

[SECURITY] Fedora 26 Update: qtpass-1.2.1-1.fc26

QtPass is a cross-platform GUI for pass, the standard Unix password manager...

ManageEngine Password Manager Pro Multiple XSS Vulnerabilities (Dec 2017)

ManageEngine Password Manager Pro is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

ZOHO ManageEngine Password Manager Pro Cross-Site Scripting Vulnerability

ZOHO ManageEngine Password Manager Pro PMP is a set of password management software from ZOHO. The software can record general password information, website login passwords, software registration codes and Email account passwords. A cross-site scripting vulnerability exists in the SearchResult.ec...

Pre-Installed Password Manager On Windows 10 Lets Hackers Steal All Your Passwords

If you are running Windows 10 on your PC, then there are chances that your computer contains a pre-installed 3rd-party password manager app that lets attackers steal all your credentials remotely. Starting from Windows 10 Anniversary Update Version 1607, Microsoft added a new feature called Conte...

Cross site scripting

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

CVE-2017-17698

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

CVE-2017-17698

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

CVE-2017-17698

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

CVE-2017-17698

CVE-2017-17698 affects Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400). The issue is a reflected Cross‑Site Scripting (XSS) vulnerability in two files, SearchResult.ec and BulkAccessControlView.ec, as described in multiple sources. The vulnerability arises from improper handling of inp...

PT-2017-14958

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Password Manager Pro version 9 before 9.4 9400 Description The issue is related to reflected XSS in SearchResult.ec and BulkAccessControlView.ec. Recommendations For Zoho ManageEngine Password Manager Pro version 9 before 9.4...

CVE-2017-17698: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...

The vulnerability of the HTTP server of the Trend Micro Password Manager allows a hacker to execute arbitrary commands.

The vulnerability of the Trend Micro Password Manager HTTP server relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the URL parameters “apiopenUrlInDefaultBrowser” and “apishowSB” remotely...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2017-30335)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site scripting vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to adequately filter data. A remote attacker can exploit this vulnerability to execute arbitrary HTML or scrip...

Fappening 2017: More Celebrity Photos Hacked and Leaked Online

It seems like celebrities have not taken their security seriously, which once again resulted in the leaking of personal photographs of more a-listed celebrities. Dozens of personal and intimate photos of Anne Hathaway, Miley Cyrus, Kristen Stewart, Katharine McPhee, golfer Tiger Woods and his ex...

GLSA-201708-04 : Ked Password Manager: Information leak

The remote host is affected by the vulnerability described in GLSA-201708-04 Ked Password Manager: Information leak A history file in /.kedpm/history is written in clear text. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master...

Ked Password Manager: Information leak

Background Helps to manage large numbers of passwords and related information and simplifies the tasks of searching and entering password data. Description A history file in /.kedpm/history is written in clear text. All of the commands performed in the password manager are written there. This can...