SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2019:0447-1)

This update for libqt5-qtbase provides the following fixes : Security issues fixed : CVE-2018-15518: Fixed double free in QXmlStreamReader bsc1118595 CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler bsc1118596 Non-security issues fixed: Fix dynamic loading of libGL...

SUSE SLED12 / SLES12 Security Update : PackageKit (SUSE-SU-2019:0128-1)

This update for PackageKit fixes the following issues : Fixed displaying the license agreement pop up window during package update bsc1038425. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

PT-2019-20184

Name of the Vulnerable Software and Affected Versions PackageKit affected versions not specified Description The issue concerns the display of the license agreement pop-up window during package updates. No information is provided about the estimated number of potentially affected devices or...

Google Chrome Privilege Bypass Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the Permissions pop-up window in Google Chrome versions prior to 66.0.3359.106. A remote attacker can exploit this vulnerability to bypass the permissions policy with the help of...

Cross-site Scripting (XSS)

pimcore/pimcore is vulnereable to cross-site scripting XSS attacks. The library does not sanitize the text fields in multiple pop-up dialogs, allowing a malicious user to inject and execute arbitrary Javascript...

Monstra-Dev 3.0.4 Cross Site Scripting

Exploit Title:Monstra-Dev 3.0.4 Stored Cross Site Scripting Date: 04-08-2018 Exploit Author: Nainsi Gupta Vendor Homepage: http://monstra.org/ Software Link: https://github.com/monstra-cms/monstra Published In- https://indiancybersecuritysolutions.com/cve-2018-14922-cross-site-scripting/ Product...

My Video Converter 1.5.24 Buffer Overflow

!/usr/bin/env python Exploit Title : My Video Converter 1.5.24 - Remote Buffer Overflow Discovery by : Shubham Singh Known As : Spirited Wolf Twitter: @Pwsecspirit Email : [email protected] Youtube Channel : www.youtube.com/c/Pentestingwithspirit Discovey Date : 29/07/2018 Software Link...

pop-up-story.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-645604 Description| Value ---|--- Affected Website:| pop-up-story.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows 10: Pop-up Blocker (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgepopupblocker.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Configure Pop-up Blocker Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Python-Based Adware Evolves to Install Malicious Browser Extensions

Security researchers have been warning of a few newly detected variants of python-based adware that are being distributed in the wild not only to inject ads but also found installing malicious browser extensions and hidden cryptocurrency miner into victims' computers. Dubbed PBot , or PythonBot ,...

Vaultize Enterprise File Sharing Cross-Site Scripting Vulnerability (CNVD-2018-08539)

Vaultize Enterprise File Sharing is an enterprise file sharing solution from Vaultize Technologies, USA. The solution includes features such as data retention management, versioning, secure data handling, data backup and recovery. A cross-site scripting vulnerability exists in the file or folder...

CVE-2018-10209

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name...

PT-2018-9755 · Vaultize · Vaultize Enterprise File Sharing

Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31 Description: An issue was discovered that allows for Stored XSS on the file or folder download pop-up. This occurs via a crafted file or folder name. Recommendations: For Vaultize Enterprise...

CVE-2018-10209: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name...

Eramba Cross-Site Scripting Vulnerability

Eramba is an open source, enterprise-level IT governance application from Eramba UK. The program features IT security, compliance auditing and analysis, and more. A cross-site scripting vulnerability exists in the prompt pop-up box in Eramba e version 1.0.6.033, which stems from the program's...

Firefox, Chrome Patch Vulnerabilities, Add Security Features

Both Mozilla and Google have updated their browsers this week and have added important security fixes along with bolstering user privacy and safety. Google tackled 53 security fixes on Wednesday with the debut of Chrome 64 version 64.0.3282.119 for Windows, Mac and Linux. Only three of the...

unterschattmair.com XSS vulnerability

Open Bug Bounty ID: OBB-535541 Description| Value ---|--- Affected Website:| unterschattmair.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

3dvf.com XSS vulnerability

Open Bug Bounty ID: OBB-533859 Description| Value ---|--- Affected Website:| 3dvf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Facebook Password Stealing Apps Found on Android Play Store

Even after many efforts made by Google last year, malicious apps always somehow manage to make their ways into Google app store. Security researchers have now discovered a new piece of malware, dubbed GhostTeam, in at least 56 applications on Google Play Store that is designed to steal Facebook...

Samsung Internet Browser SOP Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the...