[SECURITY] Fedora 27 Update: libxml2-2.9.7-1.fc27

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

CVE-2018-6379

CVE-2018-6379 affects Joomla! up to version 3.8.3, due to inadequate input filtering in the Uri (JUri) class, enabling XSS. Affected range: 1.5.0–3.8.3; fixed in 3.8.4. Connected scans confirm the Uri class XSS (CVE-2018-6379) among Joomla! vulnerabilities; no exploitation details provided in the...

CVE-2018-6379

In Joomla! before 3.8.4, inadequate input filtering in the Uri class formerly JUri leads to an XSS vulnerability...

Session Fixation

github.com/ory/hydra is vulnerable to session fixation attacks. A malicious user can pass a consent uri missing a CSRF token to the user and log in afterwards as that user through a callback url...

PT-2018-17518

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.8.4 Description The issue is related to inadequate input filtering in the Uri class, which leads to a potential XSS vulnerability. Recommendations For versions prior to 3.8.4, update to version 3.8.4 or later to...

CVE-2018-6379: Improper Neutralization of Input During Web Page Generation

In Joomla! before 3.8.4, inadequate input filtering in the Uri class formerly JUri leads to an XSS vulnerability...

CVE-2017-14593

Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of...

Command injection

Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree...

Command injection

Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of...

CVE-2017-14592

Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree...

CVE-2017-14593: Improper Neutralization of Special Elements used in a Command

Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of...

PT-2018-5685

Name of the Vulnerable Software and Affected Versions: Sourcetree for Windows versions 0.5.1.0 through 2.4.7.0 excluding 2.4.7.0 Description: The issue affects the handling of Mercurial and Git repositories in Sourcetree for Windows, allowing an attacker with commit permission to a linked...

CVE-2017-14592: Improper Neutralization of Special Elements used in a Command

Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree...

PT-2018-5684

Name of the Vulnerable Software and Affected Versions: Sourcetree for macOS versions 1.0b2 through 2.7.0 Description: The issue affects the handling of Mercurial and Git repositories in Sourcetree for macOS, allowing an attacker with commit permission to a linked repository to exploit argument an...

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

Sql injection

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

CVE-2018-5972: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

PT-2018-17258

Name of the Vulnerable Software and Affected Versions: Classified Ads CMS Quickad version 4.0 Description: A SQL Injection issue exists, allowing exploitation via the keywords, placeid, cat, or subcat parameter to the listing URI. Recommendations: For Classified Ads CMS Quickad version 4.0,...

PT-2018-17270

Name of the Vulnerable Software and Affected Versions: Tumder An Arcade Games Platform version 2.1 Description: A SQL Injection issue exists in the Tumder component for Joomla, specifically via the PATH INFO to the category/ URI. This allows for potential exploitation. Recommendations: For versio...