CVE-2018-7567

In the Admin Package Manager in Open Ticket Request System OTRS 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server...

PT-2018-18161 · Otrs +2 · Otrs +2

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 5.0.0 through 5.0.24 Open Ticket Request System OTRS versions 6.0.0 through 6.0.1 Description: The issue allows authenticated admins to exploit a Blind Remote Code Execution vulnerability by loading a...

openSUSE Security Update : openssl-steam (openSUSE-2018-168)

This update for openssl-steam fixes the following issues : - Merged changes from upstream openssl Factory rev 137 into this fork for Steam. Updated to openssl 1.0.2k : - CVE-2016-7055: Montgomery multiplication may produce incorrect results boo1009528 - CVE-2016-7056: ECSDA P-256 timing attack ke...

Integrate Your Ticketing System into Database Security to Prevent DBA Privilege Abuse

Many of the recent high-profile data security breaches were made by trusted insiders. They are often database administrators DBAs who are highly privileged and trusted insiders with access to sensitive data. In this blog post, I will discuss the inherent risk introduced by highly privileged...

ticket-direct.de XSS vulnerability

Open Bug Bounty ID: OBB-556788 Description| Value ---|--- Affected Website:| ticket-direct.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

JS Support Ticket 1.1.0, ,XSS (Cross Site Scripting)

JS Support Ticket 1.1.0, ,XSS Cross Site Scripting UpdateNotice URL 1.1.1 http://www.joomsky.com/products/js-ticket-joomla.html...

Joomla! JS Support Ticket Cross-Site Request Forgery Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JS Support Ticket is used in which a set of open source ticketing system plug-ins . A cross-site request forgery vulnerability...

Cross site request forgery (csrf)

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket...

CVE-2018-6007

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket...

CVE-2018-6007

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket...

CVE-2018-6007

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket...

CVE-2018-6007

CVE-2018-6007 describes a cross‑site request forgery in the Joomla! JS Support Ticket 1.1.0 component. The vulnerability allows an attacker to perform unauthorized actions such as injecting HTML or editing support tickets, via CSRF without explicit user interaction in the documented description. ...

Joomla! Component JS Support Ticket 1.1.0 - Cross-Site Request Forgery

Joomla! Component JS Support Ticket 1.1.0 - Cross-Site Request Forgery CODE input...

Joomla! JS Support Ticket 1.1.0 Cross Site Request Forgery

CODE inpu...

Joomla JS Support Ticket 1.1.0 Component - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications CODE input type="hidden" name="task" id="task" value="sa...

Joomla! Component JS Support Ticket 1.1.0 - Cross-Site Request Forgery

CODE input type="hidden" nam...

Fedora 27 : openssh (2017-96d1995b70)

This update provides new upstream release OpenSSH 7.6 with several bug fixes and new features, including CVE-2017-15906, compatibility with WinSCP, improvement for PAM stack, enablement for s390x sandbox, new GSSAPI key exchange methods and improvement of handling kerberos tickets. Note that...

[SECURITY] Fedora 27 Update: heimdal-7.5.0-1.fc27

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

[SECURITY] Fedora 26 Update: heimdal-7.5.0-1.fc26

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01214)

Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...