CVE-2019-9051: Cross-Site Request Forgery (CSRF)

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI...

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

Cross site request forgery (csrf)

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

Cumulative Update 1 for Exchange Server 2019

None None...

Cumulative Update 22 for Exchange Server 2013

Cumulative Update 22 for Exchange Server 2013 Cumulative Update 22 for Microsoft Exchange Server 2013 was released on February 12, 2019. This cumulative update is a security update. This cumulative update includes fixes for nonsecurity issues and all previously released fixes for security and...

Quarterly SPM Support Bulletin 2015 Q4

Question Quarterly SPM Support Bulletin 2015 Q4 Answer SPM Support Bulletin ICM 9.0.2 Released ICM 9.0.2 has been released. You can find the release documentation here. Highlights include; setting scheduler properties per process allowing more flexible on error handling, new charts in Presenter...

Microsoft Forefront Threat Management Gateway 2010 Service Pack 2

Describes the issues that are resolved by Microsoft Forefront Threat Management Gateway 2010 Service Pack 2.SummaryThis article lists the problems that are fixed in Microsoft Forefront Threat Management Gateway 2010 Service Pack 2 SP2. Service packs are cumulative. This means that the problems th...

Consistent backup failures after installing vSphere 6.7 U1

Challenge After updating vCenter to 6.7U1, processing of all VMs fails with "Object reference not set to an instance of an object." Cause The issue is triggered by an update to the vSphere API version in vCenter 6.7 U1. Solution The issue affects only Veeam Backup & Replication 9.5 Update 3a...

CVE-2018-16833

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI...

CVE-2018-16833

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI...

CVE-2018-16833: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI...

CVE-2018-16805

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator...

CVE-2018-16805: Improper Neutralization of Input During Web Page Generation

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator...

baigo CMS Cross-Site Request Forgery Vulnerability

baigo CMS is an open source PHP-based content management system CMS. A cross-site request forgery vulnerability exists in the index.php?m=article&c=request page in baigo CMS version 2.1.1, which can be exploited by remote attackers to publish arbitrary articles...

intoceansys.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-671134 Description| Value ---|--- Affected Website:| intoceansys.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-12429

JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie...

CVE-2018-12429

JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie...

Build Numbers and Versions of Veeam Backup & Replication

This KB article lists all versions of Veeam Backup & Replication and their respective build numbers. For more information on downloading the latest version of Veeam Backup & Replication, visit: My Account Portal - Product Downloads Latest Downloads Page Veeam Backup & Replication -- What's New PD...

Welcome to a New Look for Threatpost

Today we’re excited to unveil a better Threatpost. The update brings a fresh new look to the site, but also gives us a better platform overall, built and designed from the ground up for the future. Our first goal was to preserve all the things that didn’t need fixing – starting with Threatpost’s...