CVE-2018-1000887

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

Cross site scripting

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

CVE-2018-1000887

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

PT-2018-9603

Name of the Vulnerable Software and Affected Versions: peel-shopping 9 1 0 version Description: The issue allows an authenticated user to inject java script code in the Site Name EN parameter, resulting in a Cross Site Scripting XSS issue. This can be exploited if the malicious user has access to...

CVE-2018-1000887: Improper Neutralization of Input During Web Page Generation

Peel shopping peel-shopping910 version contains a Cross Site Scripting XSS vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account...

Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM RLKS Administration and Reporting Tool Admin

Summary There are multiple vulnerabilities related to IBM® Runtime Environment Java™ Technology Edition which is used and shipped by different versions of IBM Rational License Key Server Administration and Reporting Tool Admin ART. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An...

[SECURITY] Fedora 29 Update: phpMyAdmin-4.8.4-1.fc29

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 28 Update: phpMyAdmin-4.8.4-1.fc28

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

New Delegated Administration feature in Enterprise Threat Protector

Managing security configurations for large organizations with locations scattered around the world can be challenging. Likewise, some businesses have multiple operating divisions that are separate entities but all use the same IT infrastructure. As an IT leader, you likely want to have consistenc...

CVE-2018-20306

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

CVE-2018-20306

CVE-2018-20306 is a stored XSS vulnerability in the web administration UI of Pulse Secure Virtual Traffic Manager (vTM). Affected: vTM 9.9 before 9.9r2, 10.4r1, and 17.2r1 (per multiple sources). The issue can let an authenticated remote attacker inject script/HTML via a crafted website to steal ...

CVE-2018-20306: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

PT-2018-2750

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to errors in processing relative directory paths when exporting repository content to an archive. Exploitation of this issue may allow a remote...

PT-2018-15305

Name of the Vulnerable Software and Affected Versions Pulse Secure Virtual Traffic Manager versions prior to 9.9r2 Pulse Secure Virtual Traffic Manager version 10.4r1 Description A stored cross-site scripting XSS issue in the web administration user interface may allow a remote authenticated...

PT-2018-3344

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.3.1 Description: A vulnerability in Brocade Network Advisor could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using undocumented...

LanSpy 2.0.1.159 - Local Buffer Overflow

!/usr/bin/python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: LanSpy 2.0.1.159 - Local Buffer Overflow RCEPoC Date: 2018-12-16 Author: Juan Prescotto Tested Against: Win7 Pro SP1 64 bit Software...

BSA-2018-841

Security Advisory ID : BSA-2018-841 Component : Hard-coded Credentials Revision : 3.0: Final A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented...

GPON ONT Home Gateway Router is vulnerable to authenticated remote command execution (CVE-2018-10562)

Binary data gponcve-2018-10562.nbin...

Moderate: Red Hat Security Advisory: RHGS WA security and bug fix update

Updated packages are now available for Red Hat Gluster Storage 3.4 Web Administration on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

RHEL 7 : RHGS WA (RHSA-2018:3829)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3829 advisory. Red Hat Gluster Storage Web Administration includes a fully automated setup based on Ansible and provides deep metrics and insights into active Glust...