CVE-2017-15608

Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...

Cross site request forgery (csrf)

Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...

CVE-2017-15608

Inedo ProGet is affected by a CSRF vulnerability in versions before 5.0 Beta5, enabling an attacker to change advanced settings. The issue is documented across multiple sources (NVD/NVD3/OpenVAS) with CVSS metrics: CVSSv3 base score 6.5 (I:H) and CVSSv2 base score 4.3 (I:P). Root cause is a cross...

Excerpts From “Why Companies Are Replacing AV with Advanced Endpoint Security”

Is legacy antivirus failing to keep your endpoints secure? In Carbon Black's recent webinar, Fulcanelli Chavez, Sr. Security Operations Analyst at D.A. Davidson, shared how switching from McAfee to Cb Defense has improved protection and simplified operations for his team. Below are excerpts from...

Accelerating Your Zero Trust Security Transformation with Enterprise Threat Protector

The basic concepts of zero trust security are relatively simple: trust nothing, verify everything, and maintain consistent controls. But, for CISOs and CIOs charged with transforming their legacy moats and castles architecture to one that allows their enterprises to embrace all of the benefits of...

ZDResearch Advanced Web Hacking Training 2018 – Learn Online

Are you looking to master web hacking? Interested in a bug-hunting career? Do you want to land a job in cybersecurity? Are you already working as a security engineer, but want to further advance or refine your skills? If yes, read on. ZDResearch Advanced Web Hacking AWH course, including optional...

korrosionsschutzshop.de XSS vulnerability

Open Bug Bounty ID: OBB-678707 Description| Value ---|--- Affected Website:| korrosionsschutzshop.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: Stack Trace Vulnerability Affects IBM B2B Advanced Communication (CVE-2016-0378)

Summary IBM B2B Advanced Communications has addressed the stack trace display issue when no default error page was set up. Vulnerability Details CVEID: CVE-2016-0378 DESCRIPTION: IBM B2B Advanced Communications could allow a remote attacker to obtain sensitive information caused by improper...

Cisco Webex Network Recording Player Remote Code Execution Vulnerability (CNVD-2018-19401)

Cisco Webex Network Recording Player for Advanced Recording Format ARF is a media player primarily designed to play WebEx recorded files in ARF format. A remote code execution vulnerability exists in Cisco Webex Network Recording Player for Advanced Recording Format ARF could be due to improper...

Cisco Webex Network Recording Player Remote Code Execution Vulnerability (CNVD-2018-19400)

Cisco Webex Network Recording Player for Advanced Recording Format ARF is a media player primarily designed to play WebEx recorded files in ARF format. A remote code execution vulnerability exists in Cisco Webex Network Recording Player for Advanced Recording Format ARF could be due to improper...

HPESBST03882 rev.1 - HPE Command View Advance Edition (CVAE) using JDK, Local and Remote Authentication Bypass

Potential Security Impact: Local: Authentication Bypass; Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP7 Command View Advanced Edition Suite all CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-2940 |...

Partner Perspectives: Protecting Against Fileless Malware with BluVector and Carbon Black

Josh Rosenthol is the Alliance and Integration Manager for BluVector. The Challenge of Fileless Malware “The infectiousness of crime is like that of the plague.” -Napoleon Bonaparte While first spoken over 200 years ago, this quote is remarkably relevant to the modus operandi of malware authors a...

naprawaglosnikow.pl XSS vulnerability

Open Bug Bounty ID: OBB-677367 Description| Value ---|--- Affected Website:| naprawaglosnikow.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

betexa.cz XSS vulnerability

Open Bug Bounty ID: OBB-677154 Description| Value ---|--- Affected Website:| betexa.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kasandra.com.pl XSS vulnerability

Open Bug Bounty ID: OBB-676678 Description| Value ---|--- Affected Website:| kasandra.com.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8440

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC, aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

Design/Logic Flaw

A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...

beethovenandcompany.com XSS vulnerability

Open Bug Bounty ID: OBB-675661 Description| Value ---|--- Affected Website:| beethovenandcompany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

johnsoninteriors.com XSS vulnerability

Open Bug Bounty ID: OBB-674604 Description| Value ---|--- Affected Website:| johnsoninteriors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bangkok925.com XSS vulnerability

Open Bug Bounty ID: OBB-674544 Description| Value ---|--- Affected Website:| bangkok925.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...