Ever Wondered How Facebook Decides — How much Bounty Should be Paid?

Facebook pays Millions of dollars every year to researchers and white hat hackers from all around the world to stamp out security holes in its products and infrastructure under its Bug Bounty Program. Facebook recognizes and rewards bug hunters to encourage more people to help the company keep...

Mitre Tackles Its Critics: Set To Revamp CVE Vulnerability Reporting

Mitre Corporation will introduce a new pilot program for classifying Common Vulnerabilities and Exposures CVE in the coming weeks. The move is in response to a backlash in the security community where some critics contend Mitre is failing to keep pace with a massive influx in the number of report...

CentOS 5 / 6 / 7 : firefox (CESA-2016:0373)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Mail.ru: SSRF/XSPA [parapa.mail.ru]

SSRF at parapa.mail.ru. On the moment of reporting, Extended scope was not covered with bug bounty, bounty was awarded as a bonus...

Debian DSA-3493-1 : xerces-c - security update

Gustavo Grieco discovered that xerces-c, a validating XML parser library for C++, mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. These flaws could lead to a denial of service in applications using the xerces-c library, o...

OS Detection Consolidation and Reporting

This script consolidates the OS information detected by several VTs and tries to find the best matching OS. Furthermore it reports all previously collected information leading to this best matching OS. It also reports possible additional information which might help to improve the OS detection. I...

[SECURITY] Fedora 23 Update: hamster-time-tracker-2.0-0.3.rc1.fc23

Project hamster is time tracking for individuals. It helps you to keep trac k on how much time you have spent during the day on activities you choose to tra ck. Whenever you change from doing one task to other, you change your current activity in hamster. After a while you can see how many hours...

The vulnerability of the IBM Tivoli Common Reporting system, a centralized data collection and analysis tool, allows a intruder to execute arbitrary commands.

The vulnerability of the InvokerTransformer class in the Apache Commons Collections library, used for centralized data collection and analysis in the IBM Tivoli Common Reporting system, is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to...

[20170408] - Core - Information Disclosure

Multiple files caused full path disclosures on systems with enabled error reporting...

SUSE SLED11 Security Update : Recommended update for LibreOffice (SUSE-SU-2016:0324-1)

This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ - LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module...

IBM Jazz Reporting Service (JRS) Denial of Service Vulnerability

IBM Jazz Reporting Service JRS is a suite of applications for discovering cross-project reports from IBM in the U.S. Report Builder is one of the tools used to quickly create reports. A security vulnerability exists in Report Builder in IBM JRS 5.0.2-Rational-CLM-ifix011 prior to version 5.x and...

OpenMRS Reporting Module 0.9.7 RCE

Remote command execution vulnerability in OpenMRS Reporting Module Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Design/Logic Flaw

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...

CVE-2015-7464

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...

CVE-2015-7464

The CVE-2015-7464 issue affects IBM Jazz Reporting Service (JRS) Report Builder, shipped with Rational Insight. A crafted request to a Report Builder URL can cause the Report Builder server to become unusable, enabling a remote attacker to trigger a denial of service. Affected versions include Ja...

CVE-2015-7464

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...

CVE-2015-7464: Undefined Security Weakness

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...

PT-2016-3787

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 5.x before 5.0.2-Rational-CLM-ifix011 IBM Jazz Reporting Service JRS versions 6.0 before 6.0.0-Rational-CLM-ifix005 Description The issue allows remote attackers to cause a denial of service, resulting i...

SUSE-SU-2016:0324-1 Recommended update for LibreOffice

This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module,...

IBM Jazz Reporting Service Report Builder Man-in-the-Middle Attack Vulnerability

IBM Jazz Reporting Service is a suite of applications for discovering cross-project reports from IBM in the U.S. Report Builder is one of the tools used to quickly create reports. A security vulnerability in Report Builder for IBM Jazz Reporting Service allows remote attackers to exploit the...