CVE-2018-19090: Improper Neutralization of Input During Web Page Generation

tianti 2.3 has stored XSS in the article management module via an article title...

PT-2018-14802

Name of the Vulnerable Software and Affected Versions tianti version 2.3 Description The issue is related to stored XSS in the article management module. This occurs via an article title, allowing potential exploitation. Recommendations For version 2.3, update to a newer version that contains a f...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Joomla! 3.2.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Arbitrary File Deletion Vulnerability in Background Resource Management of Rookie Article Management System

Rookie Article Management System is a PHP article management system. There is an arbitrary file deletion vulnerability in the background resource management of Rookie Article Management System. An attacker can exploit the vulnerability to delete arbitrary files, resulting in system reinstallation...

CW Article Attachments (Pro Version), SQL Injection

CW Article Attachments Pro Version from cwjoomla.com, versions 2.1.0 and previous, SQL Injection resolution: update to 2.1.2 update notice: http://www.cwjoomla.com/download-cw-article-attachments...

CW Article Attachments (Free Version), SQL Injection

CW Article Attachments Free Version from cwjoomla.com, versions 1.0.6 and previous, SQL Injection resolution: update to 1.0.7 update notice: http://www.cwjoomla.com/download-cw-article-attachments...

CVE-2018-18271

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

Cross site scripting

XSS exists in CMS Made Simple version 2.2.7 via the m1newsurl parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18271: Improper Neutralization of Input During Web Page Generation

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

PT-2018-14388

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.7 Description A security issue exists due to the presence of XSS in the m1 news url parameter. This issue is specifically found in the "Content--News--Add Article" action within the admin/moduleinterface.php file...

2018-10 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4462937)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-10 Cumulative Update for Windows Server 2016 (1709) for x64-based Systems (KB4462918)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Chinese Supply Chain Hardware Attack

Bloomberg is reporting about a Chinese espionage operating involving inserting a tiny chip into computer products made in China. I've written about alternate link this threat more generally. Supply-chain security is an insurmountably hard problem. Our IT industry is inexorably international, and...

CentOS 7 : kernel (CESA-2018:2748)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2018-17380

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

CVE-2018-17380

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

Sql injection

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

PT-2018-14004

Name of the Vulnerable Software and Affected Versions Article Factory Manager version 4.3.9 Description A SQL Injection issue exists in the Article Factory Manager component for Joomla, which can be exploited via the start date, m start date, or m end date parameter. Recommendations For Article...