belgianrail.be XSS vulnerability

Vulnerable URL: http://www.belgianrail.be/jp/sncb-nmbs-routeplanner/traininfo.exe/en/208221/71700/16702/61057/80?ld=std=%27-confirmopenbugbounty-%27=10/10/2017evaId=8814001type=dep=8814001=dep=08:43=50===Sa,%2013/10/12=1:0111111==sq& Details: Description| Value ---|--- Patched:| No Latest check f...

Product update: Virtuozzo 7.0 Update 5 Hotfix 2 (7.0.5-642)

The Hotfix 2 for Virtuozzo 7.0 Update 5 provides stability and usability bug fixes. Vulnerability id: PSBM-70653 Unable to connect network adapter to a running VM. Vulnerability id: PSBM-70557 Ghost file limit was ignored when migrating containers. Vulnerability id: PSBM-70551 plooptrim could ent...

A vulnerability in the Linux operating system’s net/ipv4/route.c file, which allows an attacker to cause a service failure or exert other effects.

The vulnerability in the Linux operating system’s net/ipv4/route.c code is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker acting locally to trigger a service failure dereferencing the null pointer or cause other effects through system calls...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.6.1 bug fix and enhancement update

Red Hat OpenShift Container Platform releases 3.6.1 are now available with updates to packages and images that fix several bugs and add various enhancements. Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or privat...

Unauthorized Access Vulnerability in China Mobile and Routing Apps

China Mobile He-Route APP is a cell phone supporting service software for He-Route. Unauthorized access vulnerability exists in China Mobile and Router APP. By analyzing the packet grabbing of the app to get the command interface to control the router, an attacker without administrator...

China Mobile and Routing App has ftp backdoor vulnerability

China Mobile He-Route APP is a cell phone supporting service software for He-Route. A ftp backdoor vulnerability exists in the China Mobile He-Route APP. The vulnerability is caused by writing ftp account passwords into the application. An attacker can use the vulnerability to obtain ftp account...

SUSE SLES12 Security Update : quagga (SUSE-SU-2017:2294-1)

This update provides Quagga 1.1.1, which brings several fixes and enhancements. Security issues fixed : - CVE-2017-5495: Telnet 'vty' interface DoS due to unbounded memory allocation. bsc1021669 - CVE-2016-1245: Stack overrun in IPv6 RA receive code. bsc1005258 Bug fixes : - Do not enable zebra's...

Linux kernel denial of service vulnerability (CNVD-2017-24356)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the net/ipv4/route.c file in Linux kernel versions 4.13-rc1 through 4.13-rc6. A local attacker can exploit this vulnerability to...

NetworkManager and libnl3 security, bug fix and enhancement update

NetworkManager 1:1.8.0-9 - device: don't change MTU unless explicitly configured rh 1460760 - core: don't remove external IPv4 addresses rh 1459813 1:1.8.0-8 - cli: fix output of iface in overview output rh1460219 - ppp: unexport NMPPPManager instance on dispose rh1459579 - cli: remove spurious...

NetScaler SD-WAN Troubleshooting Guide

Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...

Command injection

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route...

Security Advisory - MaxAge LSA Vulnerability in OSPF Protocol of Some Huawei Products

Some Huawei products have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS Link Status age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack...

Fedora 26 : FlightGear (2017-60775d65bb)

This updates fixes a security bug in the route manager, to prevent it from overwriting arbitrary files CVE-2017-8921 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-15547)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the application/core/controller/images.php file in FineCMS 2017-07-12 and earlier versions. A remote attacker can exploit this vulnerability to...

CVE-2017-11178

In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked...

CVE-2017-11178

In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked...

Design/Logic Flaw

In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked...

Cross site scripting

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account...

CVE-2017-11179

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account...

FineCMS Arbitrary File Write Vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework development for multiple terminals, including Pc-side web pages and mobile web pages, support for customized content models and member models, and can be customized fields, can be...