CVE-2018-5666

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bgcolor parameter...

USN-3477-4 firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

Shenzhen JetVision Technology Co., Ltd. video conferencing system has an overstepping access vulnerability

Shenzhen JetVision Technology Co., Ltd. video conferencing system is a new set of video conferencing communication system for customers in different industries to meet their video communication needs. There is an override access vulnerability in the video conferencing system of Shenzhen JetVision...

Code Execution Vulnerability in Tpshop Mall Backend

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . Tpshop mall backend there is a code execution vulnerability . The vulnerability is due to the program does not effectively filter the...

[SECURITY] Fedora 25 Update: konversation-1.7.4-1.fc25

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

[SECURITY] Fedora 26 Update: konversation-1.7.4-1.fc26

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

Women in Tech and Career Spotlight: Shu White

Up next in our series featuring women in technology at Imperva is a spotlight on Shu White, the company’s vice president and deputy general counsel. Hailing from a legal background, I found her perspective particularly unique. Read below for Shu’s take on the cybersecurity industry, the inspiring...

Veterans Are a Valuable Cybersecurity Workforce

Editor's Note: This article originally appeared on ITSPmagazine. As a former United States Marine I believe veterans can be instrumental in helping to close the growing cybersecurity skills and people gap. My own story reveals how a military background can provide the perfect foundation for a...

[SECURITY] Fedora 26 Update: wget-1.19.2-1.fc26

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

thinkcmf background getshell

No description provided by source...

SemCms background getshell

No description provided by source...

phpmywind background arbitrary file deletion

No description provided by source...

SQL injection vulnerability in OURPHP background ourphp_articleview.php page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the ourphparticleview.php page in the background of OURPHP. Attackers can use this vulnerability to obtain sensitive database...

zzcms8. 1 Background categories stored xss

No description provided by source...

zzcms8. 1 Background save ad add storage type xss

No description provided by source...

zzcms8. 1 Background multiple stored xss

No description provided by source...

Discuz X3. 3 authkey generation algorithm of the security vulnerability and the background arbitrary code execution vulnerability

0x00 background description Discuz official in 2017 8 May 1 release of the latest version of the X3. 4 version, the latest version fixes multiple security issues. 360CERT and 360 0KEE Team then for the events to follow. 0x01 vulnerability overview 360CERT and 360 0KEE Team by comparing DiscuzX3...

zzcms8. 1 Background stored xss

No description provided by source...

DEBIAN-CVE-2017-11549

The playmidi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option...

DEBIAN-CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...