Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability due to incorrect permission assignment (CVE-2016-3022)

Summary IBM Security Access Manager appliances could allow an authenticated user to gain access to sensitive information due to incorrect file permissions. Vulnerability Details CVEID: CVE-2016-3022 DESCRIPTION: IBM Security Access Manager for Web could allow an authenticated user to gain access ...

Security Bulletin: Financial Transaction Manager for Corporate Payment Services Access Control: Information Disclosure - Dojo Readme's (CVE-2016-0232)

Summary IBM Financial Transaction Manager for Corporate Payment Services for Multi-Platform could allow an authenticated attacker to obtain sensitive information from README files that could aid in further attacks against the system. Vulnerability Details CVEID: CVE-2016-0232 DESCRIPTION: IBM...

[SECURITY] Fedora 28 Update: qt3-3.3.8b-74.fc28

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README...

[SECURITY] Fedora 27 Update: qt3-3.3.8b-74.fc27

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README...

WordPress User Role Editor Plugin < 4.25 - Privilege Escalation Exploit

Exploit for php platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress User Role Editor Plugin Privilege Escalation', 'Description' = %q The WordPress...

C5Scan - Vulnerability Scanner And Information Gatherer For The Concrete5 CMS

Vulnerability scanner and information gatherer for the Concrete5 CMS. Is a little out of date presently pending a refactor. concrete5 is an open-source content management system CMS for publishing content on the World Wide Web and intranets. concrete5 is designed for ease of use, for users with a...

ManageEngine Service Desk Plus Cross Site Scripting

Exploit Title: ManageEngine Service Desk Plus "%3ca xmlns%3aa%3d'http%3a%2f%2fwww.w3.org %2f1999%2fxhtml'%3e%3ca%3abody onload%3d'alert1'%2f%3e%3c%2fa%3e &TECHNICIANKEY=E428CCCD-D5F4-4CF8-9452-76C195982BE3&INPUTDATA=from0limit25filterbyAllRequests will cause the execution of script. Fixes...

Solaris 10 (sparc) : 119059-66

X11 6.6.2: Xsun patch. Date this patch was last updated by Sun : Mar/15/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security fix for the ALT Linux 8 package clamav version 0.99.3-alt1

0.99.3-alt1 built Jan. 30, 2018 Sergey Y. Afonin in task 198652 Jan. 28, 2018 Sergey Y. Afonin - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...

Security fix for the ALT Linux 9 package clamav version 0.99.3-alt1

Jan. 28, 2018 Sergey Y. Afonin 0.99.3-alt1 - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...

[SECURITY] Fedora 27 Update: wordpress-4.8.3-1.fc27

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

GitLab: [Textile] XSS in project README files

Hi, Another parser bypass here – I discovered that Textile markup can be used to inject a stored JavaScript payload into a project README.textile file : Steps to Reproduce 1. Create a new GitLab project 2. Initialise the project by creating a README file 3. Set the file title to README.textile 4...

GitLab: [RDoc] XSS in project README files

Hi, While experimenting with parser bypass techniques, I discovered that RDoc markup could be used to inject a stored JavaScript payload into a project README.rdoc file. Please note that this issue is separate to my earlier report 200565 XSS with AsciiDoc markup, marked as duplicate. Steps to...

[SECURITY] Fedora 24 Update: wordpress-4.7.1-1.fc24

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

Nextcloud: Wordpress Version Disclosure Bug On Nextcloud

Hi @nextcloud , Description Wordpress version disclosure. Affected items https://nextcloud.com/readme.html https://nextcloud.com/wp-admin/install.php https://nextcloud.com/wp-login.php The impact of this vulnerability Possible Wordpress Version information disclosure.You are using wordpress 4.6.1...

LocalTapiola: /icons/README available on viestinta.lahitapiola.fi

Basic report information Summary: Informational message that the file http://viestinta.lahitapiola.fi/icons/README exists. Description: http://viestinta.lahitapiola.fi/icons/README exists. Domain: http://viestinta.lahitapiola.fi/ Browsers / Apps Verified In: any browser any client Steps To...

BBQSQL - A Blind SQL Injection Exploitation Tool

Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don't you have to write something custom. This is time-consuming and tedious. BBQSQL can help you address those issues. BBQSQL is a blind SQL injection framework written in Python. It is...

Lenovo ThinkVantage Communications Utility 3.0.42.0 - Unquoted Service Path Privilege Escalation

Lenovo ThinkVantage Communications Utility 3.0.42.0 - Unquoted Service Path Privilege Escalation Exploit Title: Lenovo ThinkVantage Communications Utility - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 3.0.42.0 Tested on: Windows 7 Professional Th...

[SECURITY] Fedora 24 Update: wordpress-4.5.2-2.fc24

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

CVE-2016-0232

IBM Financial Transaction Manager FTM for ACH Services, Check Services and Corporate Payment Services CPS 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files...