TYPO3 CMS 2.0.3 Cross Site Scripting Vulnerability

TYPO3 CMS versions 2.0.3 and below suffer from a cross site scripting vulnerability. title: Cross Site Scripting XSS product: Recommend Page extension for TYPO3 CMS pbrecommendpage vulnerable version: =2.0.3 fixed version: - CVE number: - impact: Medium homepage: https://typo3.org/ found:...

Apache NiFi 1.0.0 / 1.1.0 Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache NiFi 1.0.0 Apache NiFi 1.1.0 Description: There is a cross-site scripting...

technologyreview.com XSS vulnerability

Vulnerable URL: https://www.technologyreview.com/s/603343/eggs-from-skin-cells-heres-why-the-next-fertility-technology-will-open-pandoras-box/?utmcampaign=internal%27"--!medium=homepagesource=top-stories2' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...

CVE-2015-1860 analysis: Qt module for processing GIFs cause a crash-bug warning-the black bar safety net

Vulnerability background Qt is a cross-platform graphical interface programming Framework, and its version is less than 4. 8. 7 and 5. x is less than 5. 4. 2 analytical picture of the process for cross-border inspections of improper handling, will result in the memcpy of the process occurs out of...

Microsoft Releases January 2017 Security Bulletin

Microsoft has released four updates to address vulnerabilities in Microsoft software. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Microsoft Security Bulletins MS17-001 through...

Autodesk Design Review < 2013 Hotfix 3 Multiple RCE

The version of Autodesk Design Review installed on the remote Windows host is prior to 2013 Hotfix 3. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists when handling FLI files due to improper validation of user-supplied input. An unauthenticated,...

Autodesk Design Review Has Multiple Remote Code Execution Vulnerabilities

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software allows you to view, annotate, and track drawing files drawn in AutoCAD software, as well as optimize the design approval process. Autodesk Design Review has multiple remote code...

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in its Cisco CloudCenter Orchestrator. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Cisco Security Advisory and apply the...

Autodesk Design Review JPEG DHT Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Design Review FLI Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Design Review JFIF Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Design Review BMP Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Design Review PNG Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

President Obama Orders 'Full Review' of Possible Russian hacking in US Election

In his final month in office, President Barack Obama has ordered U.S. intelligence agencies to conduct a "full review" of pre-election cyber attacks against Democratic Party organizations that many believe affected the outcome of the 2016 presidential election. The United States intelligence...

Sony IPELA ENGINE IP Cameras Backdoor Accounts Vulnerability

Sony IPELA ENGINE IP Cameras contain multiple backdoors that, among other functionality, allow an attacker to enable the Telnet/SSH service for remote administration over the network. Other available functionality may have undesired effects to the camera image quality or other camera functionalit...

OpenSSL: Multiple vulnerabilities

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers and the...

HackerOne: Information Disclosure in /skills call

Link: https://hackerone.com/settings/skills IN respone of above request all reports submitted for review are getting disclosed...

m.thecard.co.kr XSS vulnerability

Vulnerable URL: http://m.thecard.co.kr/mobile/event/EventReviewListProc.asp?jsoncallback=prompt/OPENBUGBOUNTY/...

thecard.co.kr XSS vulnerability

Vulnerable URL: http://thecard.co.kr/sub/EventReviewSampleStampListProc.asp?jsoncallback=prompt/OPENBUGBOUNTY/...

I-Panda SolarEagle Authentication Issues / Denial Of Service

SolarEagle version 2.00 suffers from an administrative login bypass vulnerability. MPPT Solar Controller SMART2 suffers from missing server-side authentication, unencrypted communication, and denial of service issues. title: Multiple vulnerabilities product: I-Panda SolarEagle - Solar Controller...