CVE-2016-5899

CVE-2016-5899: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting in the Web UI. Affected Jazz Reporting Service versions: 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, and 6.0.2. The issue stems from JRS allowing arbitrary JavaScript execution via user input in the UI, potentially leading t...

CVE-2016-5898

CVE-2016-5898 affects IBM Jazz Reporting Service (JRS) shipped with Rational Insight/RRDI. The vulnerability arises from not restricting JSON serialization, enabling a remote attacker to obtain sensitive information via a direct request. Affects JRS versions 5.0, 5.0.1, 5.0.2 and 6.0 (RRDI/Ration...

WhatsApp may let you Recall Sent Messages and Track Friends Location in Realtime

Are you the victim of sending awkward WhatsApp messages to your friends, families, and colleagues while you're drunk? No need to panic now, as you'll soon be able to recall your drunk or mistakenly sent text messages on WhatsApp – a much-demanded feature. Recall Unread Messages Sent Mistakenly Th...

BINOM3 Electric Power Quality Meter

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

BlackBerry Enterprise Server Elevation of Privilege Vulnerability

BlackBerry Enterprise Server BES is a wireless solution from BlackBerry Canada. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. A security vulnerability exists in Core in BES versions 12 through 12.5.2. A remote...

ownCloud: bug reporting template encourages users to paste config file with passwords

The dangerous bug reporting template ============================= The github bug reporting template for owncloud's server and some apps contains this: The content of config/config.php: If you have access to your command line run e.g.: sudo -u www-data php occ config:list system from within your...

Nextcloud: bug reporting template encourages users to paste config file with passwords

The dangerous bug reporting template ============================= The github bug reporting template for nextcloud's server and some apps contains this: The content of config/config.php: If you have access to your command line run e.g.: sudo -u www-data php occ config:list system from within your...

Update Rollup 4 for System Center 2012 R2 Service Reporting

Update Rollup 4 for System Center 2012 R2 Service Reporting Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Service Reporting. Additionally, this article contains the installation instructions for Update Rollup 4 for System Cent...

Update Rollup 6 for System Center 2012 R2 Service Reporting

Update Rollup 6 for System Center 2012 R2 Service Reporting Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Service Reporting. This article also contains the installation instructions for Update Rollup 6 for System Center 2012 R...

HTTP Brute Force Logins With Default Credentials Reporting

It was possible to login into the remote Web Application using default credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

reporting.bonmarche.co.uk XSS vulnerability

Vulnerable URL: http://reporting.bonmarche.co.uk/cgi-bin/msite?pref2+a+0+0+0+0+0?%22%3E%3Cscript%20src=//www.openbugbounty.org/1.js%3E%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

reporting.wilko.com XSS vulnerability

Open Bug Bounty ID: OBB-199832 Description| Value ---|--- Affected Website:| reporting.wilko.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reporting.theshopatbluebird.com XSS vulnerability

Vulnerable URL: http://reporting.theshopatbluebird.com/cgi-bin/msite?tsabemailsignup+a+0+0+0+0+0?%22%3E%3Cscript%20src=//www.openbugbounty.org/1.js%3E%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

F5 Networks BIG-IP : libxml2 vulnerability (K14338030)

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document. CVE-2016-1762 File data f5bigipSOL14338030.nasl...

Ubuntu crash reporting tool there is a remote code execution vulnerability-vulnerability warning-the black bar safety net

Security researchers found the Ubuntu crash reporting tool there is a remote code execution vulnerability, an attacker may only need a malicious file will be able to capture a system. The vulnerability affects all default installations of Ubuntu Linux 12.10 Quantaland later version of theoperatin...

IBM Jazz Reporting Service Code Injection Vulnerability

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12645)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

CVE-2016-9210

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.51.11007.2. Known Fixed Releases...

CVE-2016-9210

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.51.11007.2. Known Fixed Releases...

Code injection

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.51.11007.2. Known Fixed Releases...