CVE-2018-19133

CVE-2018-19133 involves Flarum Core 0.1.0-beta.7.1, where a flaw leads to exposure of user email addresses (PII). The connected Red Hat/GHSA entries reinforce the same description of a privacy leak, but the provided documents do not specify the root cause details, affected code paths, or a remedi...

CVE-2018-9208

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which...

D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ D-Link Central WiFiManager Software Controller Multiple Vulnerabilities 1. Advisory Information Title: D-Link Central WiFiManager Software Controller Multiple Vulnerabilities Advisory ID: CORE-2018-0010 Advisory URL:...

Inedo ProGet Cross-Site Scripting Vulnerability

Inedo ProGet is a general-purpose package manager from Inedo USA with package management, filtering and upgrading features. A cross-site scripting vulnerability exists in Inedo ProGet versions prior to 5.0 Beta5. A remote attacker can exploit the vulnerability to change advanced settings...

CVE-2017-15608

Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...

marshmallow library for Python Information Disclosure Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. marshmallow library is one of the lightweight libraries for converting complex objects into Python data...

Beers with Talos EP 37: Snort 3 Beta Uses Multithreading. It’s Super Effective!

Beers with Talos BWT Podcast Ep. 37 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast. Ep. 37 show notes: Recorded Sept. 7, 2018 — We have Joel back this week and he is very happy to have himse...

Ogma CMS Cross-Site Request Forgery Vulnerability

Ogma CMS is an XML-based flat file content management system CMS. A cross-site request forgery vulnerability exists in the users.php?action=createnew page in Ogma CMS version 0.4 Beta, which can be exploited by remote attackers to add an administrator account...

YesWiki PHP Object Injection Vulnerability

YesWiki is a Wiki system written in PHP. The system is primarily used to create and manage websites in a collaborative manner. A PHP object injection vulnerability exists in the deserialization process of user input parameters in the i18n.inc.php file in YesWiki cercopitheque beta 1 and earlier...

FlightAirMap Cross-Site Scripting Vulnerability

FlightAirMap is a free, open source application developed using PHP for displaying flights on a map. A cross-site scripting vulnerability exists in the GET variable on the Registration sub-menu page in FlightAirMap 1.0-beta.21 and earlier versions. A remote attacker can exploit this vulnerability...

CVE-2018-1000641

YesWiki contains a PHP Object Injection vulnerability in i18n.inc.php due to unserialising a user-supplied parameter. Affected versions are YesWiki

DorkMe - Tool Designed With The Purpose Of Making Easier The Searching Of Vulnerabilities With Google Dorks

DorkMe is a tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.DorkMe is a tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection...

Introducing: Malwarebytes Browser Extension

Are you tired of all the unwanted content the world wide web offers up, whether you like it or not? It is our privilege to introduce you to the Malwarebytes Browser Extension BETA. Or, better said, the Malwarebytes Browser Extensions, because we have one for Firefox and one for Chrome. Introducti...

Plone allows remote attackers to read hidden folder contents

ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors...

Faraday Beta v3.0 - Collaborative Penetration Test and Vulnerability Management Platform

This new version has made major architectural changes to adapt the software to the new challenges of cybersecurity. It focuses on processing large volumes of data and facilitating user interaction with Faraday in their environment. Faraday just got much faster Architecture changes and a new...

LimeSurvey cross-site scripting vulnerability (CNVD-2018-12261)

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A cross-site scripting vulnerability exists in Boxes in LimeSurvey version...

LimeSurvey Cross-Site Request Forgery Vulnerability

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A cross-site request forgery vulnerability exists in Boxes in LimeSurvey version...

CVE-2018-1000513

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross Site Scripting XSS vulnerability in Boxes that can result in JS code execution against LimeSurvey admins. This vulnerability appears to have been fixed in 3.6.x...

uk.beta-layout.com XSS vulnerability

Open Bug Bounty ID: OBB-636468 Description| Value ---|--- Affected Website:| uk.beta-layout.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...