GitHub Electron Arbitrary Command Execution Vulnerability

GitHub Electron is an application development framework from the American company GitHub. The framework supports writing cross-platform desktop applications using JavaScript, HTML and CSS. A security vulnerability exists in the protocol handler in GitHub Electron versions 1.8.2-beta.3 and earlier...

Code Execution Vulnerability in phpyun v4.3.1 Beta

PHP Cloud Talent System phpyun is an open source talent and enterprise job search and recruitment solution built using PHP and MySQL databases. A code execution vulnerability exists in phpyun v4.3.1 Beta. An attacker can exploit the vulnerability to construct specific code, write to a configurati...

phpyun v4.3.1 Beta has a reinstallation vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A reinstallation vulnerability exists in phpyun v4.3.1 Beta. Allows attackers to exploit the vulnerability to reinstall the system...

CVE-2017-8802

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite aka ZCS before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality...

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability

Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in versions of ZCS prior to 8.8.0 Beta2. A remote attacker can exploit this vulnerability to inject...

Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker

By Waqas Opera browser developers have good news for web users annoyed This is a post from HackRead.com Read the original post: Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker...

Mail.ru: XSS в отправителе, БЕТА-версия почты

Reflected user-assisteted XSS in "Unsubscribe" beta feature via crafted e-mail From: header...

beta-viagens.eu XSS vulnerability

Open Bug Bounty ID: OBB-448301 Description| Value ---|--- Affected Website:| beta-viagens.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

7zip CVE-2016-2334 HFS+ Code Execution Vulnerability

INTRODUCTION In 2016 Talos released an advisory for CVE-2016-2334, which was a remote code execution vulnerability affecting certain versions of 7zip, a popular compression utility. In this blog post we will walk through the process of weaponizing this vulnerability and creating a fully working...

Intel Deep Learning Training Tool Elevation of Privilege Vulnerability

Intel Deep Learning Training Tool Beta is a set of deep learning training tools from Intel USA. The tool supports visual tuning and running deep learning algorithms. An elevation of privilege vulnerability exists in Intel Deep Learning Training Tool Beta 1. A remote attacker could exploit this...

Slack: Shared-channel BETA persists integration after unshare

@oneiroi discovered a bug in the Shared Channels Beta wherein notifications may still be delivered to an unshared channel previously shared. This did not affect data not in notifications, and we patched and performed a thorough investigation. Thanks for the report @oneiroi!...

Excalibur - An Eternalblue exploit payload based Powershell

Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for demostrations purposes only, and the developers are not responsible to any misuse or illeagal...

CVE-2017-16570

KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7KEYJS03. In other words, it fails to reject requests that lack an x-csrf-token header...

CVE-2017-16570

KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7KEYJS03. In other words, it fails to reject requests that lack an x-csrf-token header...

beta.mushkmahal.com XSS vulnerability

Open Bug Bounty ID: OBB-391501 Description| Value ---|--- Affected Website:| beta.mushkmahal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

euwest1-beta-pix.dsp.io Open Redirect vulnerability

Open Bug Bounty ID: OBB-363185 Description| Value ---|--- Affected Website:| euwest1-beta-pix.dsp.io Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Shee...

CVE-2017-14945

Artifex GSView 6.0 Beta on Windows is affected by a vulnerability exploitable via a specially crafted PDF file. The root cause is described as a stack corruption starting at KERNELBASE!RaiseException+0x68, enabling denial of service and potentially unspecified other impact. Documents in multiple ...

CVE-2017-14947

CVE-2017-14947 affects Artifex GSView 6.0 Beta on Windows, where processing of crafted .xps files can lead to arbitrary code execution or a denial of service. The root cause is described as a Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359, ...