CVE-2018-5477: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and...

PT-2018-16983

Name of the Vulnerable Software and Affected Versions netCADOPS Web Application versions 3.4 and prior netCADOPS Web Application versions 7.1 and prior netCADOPS Web Application versions 7.2x and prior netCADOPS Web Application versions 8.0 and prior netCADOPS Web Application versions 8.1 and pri...

CVE-2018-6878

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

Cross site scripting

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

CVE-2018-6878

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

CVE-2018-6878: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

PT-2018-17798

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1 Description A Cross Site Scripting XSS issue exists in the review section of the software, allowing exploitation via the title or description field. Recommendations For version...

PT-2018-5271

Name of the Vulnerable Software and Affected Versions Canvs Canvas version 3.4.2 Description The issue is related to a Cross Site Scripting XSS vulnerability in the User's details section, which can lead to denial of service and execution of javascript code. Recommendations For Canvs Canvas versi...

Design/Logic Flaw

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...

CVE-2018-6180

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...

PT-2018-17389

Name of the Vulnerable Software and Affected Versions Online Voting System version 1.0 Description A flaw in the profile section allows an unauthenticated user to set an arbitrary password for other accounts. Recommendations For Online Voting System version 1.0, as a temporary workaround, conside...

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to perform domain substitution.

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to defects in the Application Cache system’s functionality. Exploiting this vulnerability allows a malicious actor to replace domains using the “FALLBACK”...

PT-2018-3973

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30 Description The issue is related to the bfd section from shdr function in the elf.c component of the Binary File Descriptor BFD library. It allows remote attackers to cause a denial of service, resulting in a...

fanfics.me XSS vulnerability

Open Bug Bounty ID: OBB-554203 Description| Value ---|--- Affected Website:| fanfics.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2018-6543

In GNU Binutils 2.30, there's an integer overflow in the function loadspecificdebugsection in objdump.c, which results in malloc with 0 size. A crafted ELF file allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

ALPINE-CVE-2018-6543

In GNU Binutils 2.30, there's an integer overflow in the function loadspecificdebugsection in objdump.c, which results in malloc with 0 size. A crafted ELF file allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

DEBIAN-CVE-2018-6543

In GNU Binutils 2.30, there's an integer overflow in the function loadspecificdebugsection in objdump.c, which results in malloc with 0 size. A crafted ELF file allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

After Section 702 Reauthorization

For over a decade, civil libertarians have been fighting government mass surveillance of innocent Americans over the Internet. We've just lost an important battle. On January 18, President Trump signed the renewal of Section 702, domestic mass surveillance became effectively a permanent part of U...

Qualys Cloud Suite 8.12 New Features

This new release of the Qualys Cloud Suite, version 8.12 adds new reporting options for the PC Report, allowing you to include new summaries in the remediation section of the report for control failures. Feature Highlights Qualys Policy Compliance PC/SCAP PC Report: Failure Summary Section – You...

The vulnerability of the ap_limit_section function in the Apache HTTP Server’s httpd daemon allows a hacker to gain access to data from the process’s memory.

The vulnerability of the aplimitsection function in the Apache HTTP Server’s httpd daemon is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access data from the process’s memory through a specially crafted HTTP request...