1470 matches found
CVE-2017-9658
Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this...
Input validation
Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...
CVE-2017-9658
CVE-2017-9658 affects Philips IntelliVue MX40 WLAN monitors (Version B.06.18 and prior) under certain 802.11 network conditions. The root causes are described as improper cleanup on thrown exception (CWE-460) and improper handling of exceptional conditions (CWE-755). Under these conditions, the M...
iScripts SupportDesk Cross-Site Scripting Vulnerability
iScripts SupportDesk is a customizable web-based helpdesk software for comprehensive customer support. A cross-site scripting vulnerability exists in iScripts SupportDesk v4.3. The vulnerability can be exploited to conduct a cross-site scripting attack via the txtinteligentsearch parameter in...
Keeping your business and personal instant messages secure
Most people want to know their instant messages are securely wrapped up—whether that's for personal privacy or making sure online scammers can't grab the message content. If you're sending text on a sensitive topic, or perhaps some photo attachments intended for one person only, you definitely...
alexu.edu.eg XSS vulnerability
Open Bug Bounty ID: OBB-594462 Description| Value ---|--- Affected Website:| alexu.edu.eg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Shopify: Order notifications being sent for a deactivated staff account
Hi, Steps to reproduce : - - Have a staff account with settings permission - The staff account can go to notifications & add himself so as to get new order notifications - Now,deactivate the staff account via the admin. - Create a new order,you shall see that the staff still receives the order...
HackerOne: h1-202 leaderboard photo discloses local wifi password
Summary: the h1-202 event took several photos for the event that rotate on the public leaderboard. One of these photos disclosed the local wifi SSID and Password. Description: SSID: HackerOne Password: █████████ Steps To Reproduce 1. Look at the photo attached Remediation Have your staff...
The GDPR is Coming: We Shed Light on What’s Still Not Working
On May 25, the biggest shake-up to Europe’s data protection laws in almost a generation will finally take effect, after years of planning. For any US organization handling data on EU citizens, including service providers, it means you could face hefty fines of up to €20m $24.7m or 4% of global...
Sql injection
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
CVE-2018-5992
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
CVE-2018-5992
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
CVE-2018-5992
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
CVE-2018-5992
The CVE-2018-5992 entry describes an SQL Injection in Joomla! Joomla! Staff Master 1.0 RC 1 component, exploitable via the name parameter in a request with view=staff. Public references include exploit-db materials (POC URLs) showing how the vulnerability is triggered. The connected documents con...
Joomla Staff Master 1.0 RC 1 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component Staff Master = 1.0 RC 1 - SQL Injection Vendor Homepage: http://www.systemsunited.net/ Software Link: http://www.systemsunited.net/ Version: = 1.0 RC 1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...
Joomla! Staff Master 1.0 RC 1 SQL Injection
Exploit Title: Joomla! Component Staff Master = 1.0 RC 1 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.systemsunited.net/ Software Link: http://www.systemsunited.net/ Version: = 1.0 RC 1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5992 Exploit Author:...
Joomla! Component Staff Master 1.0 RC 1 - SQL Injection
Joomla! Component Staff Master 1.0 RC 1 - SQL Injection Exploit Title: Joomla! Component Staff Master = 1.0 RC 1 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.systemsunited.net/ Software Link: http://www.systemsunited.net/ Version: = 1.0 RC 1 Category: Webapps Tested on:...
The Second Question(s) Today’s CEOs Should Ask (& Know the Answers To)
In a previous blog, we discussed Commander’s Intent for CEOs and introduced 10 questions CEOs should be asking their teams. In this blog series, I am going to take a deeper dive into each question and break them down one at a time. We will discuss why CEOs should care about each question and the...
directory.ufl.edu XSS vulnerability
Open Bug Bounty ID: OBB-437797 Description| Value ---|--- Affected Website:| directory.ufl.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
November 21, 2017 – Morning Cyber Coffee Headlines – “Thanksgiving Week” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 21, 2017 - Headlines National Cyber Security Centre boss: For the love...