InVision: Reflective XSS in projects.invisionapp.com

I discovered a vulnerability in the commenting system, when you leave a comment with and click post comment it will trigger an alert. I will be including a video to help understand this vulnerability...

ECE Projects 'tx_solr[q]' Parameter Cross-Site Scripting Vulnerability

ECE Projects is a project management application. ECE Projects handles a cross-site scripting vulnerability in the 'txsolrq' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or...

mantis -- information disclosure vulnerability

Mantis reports: CVE-2015-5059: documentation in private projects can be seen by every user...

[SECURITY] Fedora 21 Update: php-symfony-2.5.12-1.fc21

PHP framework for web projects...

[SECURITY] Fedora 22 Update: php-symfony-2.5.12-1.fc22

PHP framework for web projects...

[SECURITY] Fedora 20 Update: php-symfony-2.5.12-1.fc20

PHP framework for web projects...

CRUCMS Crucial Networking - SQL Injection Vulnerability

Document Title: =============== CRUCMS Crucial Networking - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1497 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 14...

CRUCMS Crucial Networking - SQL Injection Vulnerability

Document Title: =============== CRUCMS Crucial Networking - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1497 Release Date: ============= 2015-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Tor Cloud Shut Down Amid Lack of Support

The Tor Project has shuttered its cloud proxy service citing security vulnerabilities, usability bugs and a lack of resources. Tor offers its users the capacity to surf the Web anonymously, bouncing traffic through a series of relay servers so that no observer at any point can tell where that...

[SECURITY] Fedora 22 Update: php-symfony-2.5.11-1.fc22

PHP framework for web projects...

[SECURITY] Fedora 21 Update: jenkins-1.590-3.fc21

Jenkins is an award-winning application that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Among those things, current Jenkins focuses on the following two jobs: - building/testing software projects continuously. In a nutshell, Jenkins provides an...

[SECURITY] Fedora 21 Update: php-symfony-2.5.11-1.fc21

PHP framework for web projects...

Siemens SIMATIC STEP 7 Security Bypass Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in Siemens SIMATIC STEP 7 due to device user privileged information in SIMATIC STEP 7 residing in an unprotected TIA Portal project, which allows an attacker to exploit the vulnerabili...

TechSmith Camtasia 7 / 8 Cross Site Scripting

Title: Reflected XSS in Flash files of TechSmith Camtasia 8 & 7 Author: Soroush Dalili @irsdl Affected Software: TechSmith Camtasia v8.4.4 latest 8.x & v7.1.1 latest 7.x Vendor URL: http://www.techsmith.com/camtasia-version-history.html Vendor Status: vulnerable CVE-ID: - Camtasia 8 v8.4.4 latest...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-9455

CVE-2014-9455 concerns a SQL injection in the CTS Projects & Software ClassAd 3.0 web app. The vulnerability is located in showads.php where the catid parameter is not properly filtered, allowing remote attackers to execute arbitrary SQL commands. This is described consistently across multiple re...

CVE-2014-9455: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

ClassAd 3.0 SQL Injection

Bilnd SQL Injection on ClassAd Risk: High CWE number: CWE-89 Date: 9/11/2014 Vendor: projects-and-software.de Version: 3.0 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Linux Ubuntu 14.04; Mozilla Firefox 34.0; sqlmap 1.0-dev-nongit-20141106 Vulnerable File: showads.php...

[SECURITY] Fedora 21 Update: jenkins-1.590-1.fc21

Jenkins is an award-winning application that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Among those things, current Jenkins focuses on the following two jobs: - building/testing software projects continuously. In a nutshell, Jenkins provides an...