Halo Remote Code Execution Vulnerability

Halo is a personal blogging system for individual developers. Halo suffers from a remote code execution vulnerability. No details of the vulnerability are available at this time...

Halo Server-Side Request Forgery Vulnerability

Halo is a light and clean Java blogging system. A server-side request forgery vulnerability exists in the SMTP configuration in Halo 1.3.2 and earlier versions, which can be exploited by an attacker to detect a server intranet...

Halo file deletion vulnerability

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 is vulnerable to file deletion. An attacker can use this vulnerability to delete arbitrary files via delBackup...

Halo cross-site scripting vulnerability (CNVD-2021-50933)

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 suffers from a cross-site scripting vulnerability that can be exploited by attackers via CommentAuthorUrl...

Halo 安全漏洞

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 is vulnerable to file deletion. An attacker can use this vulnerability to delete arbitrary files via delBackup...

Crab poend blog program has SQL injection vulnerability

Crab poend blog program is a blogging system. Crab poend blog program suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Friday Squid Blogging: Squid-Related Game

Its called "Squid Fishering." As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

SQL Injection Vulnerability in Jflyfox Blog System

Jflyfox is a java development of a powerful blog system . A SQL injection vulnerability exists in the Jflyfox blog system, which can be exploited by an attacker to obtain sensitive information from the database...

Friday Squid Blogging: Colossal Squid Photographed off the Coast of Antarctica

Wow. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

ZrLog Cross-Site Scripting Vulnerability (CNVD-2021-43499)

ZrLog is a blogging system developed using the Java language. A security vulnerability exists in ZrLog 2.1.3, which can be exploited by remote attackers to inject arbitrary web scripts and stolen administrator cookies via the nickname parameter and gain access to the admin panel...

Friday Squid Blogging: On Squid Coloration

Nice excerpt from Martin Wallins book Squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Arbitrary File Deletion Vulnerability in ZrLog CMS

ZrLog is a blogging program developed using Java. ZrLog CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to compromise the integrity of the system...

Stored Cross-Site Scripting Vulnerability in ZrLog

ZrLog is a blogging program developed using Java. A stored cross-site scripting vulnerability exists in ZrLog. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

SQL Injection Vulnerability in ZrLog

ZrLog is a blogging program developed using Java. ZrLog suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Debian: Security Advisory (DSA-4677-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hackers breach Ghost blogging platform to mine cryptocurrency

By Waqas The popular open-source blogging platform Ghost has suffered a security breach in which hackers attempted to mine cryptocurrency on... This is a post from HackRead.com Read the original post: Hackers breach Ghost blogging platform to mine cryptocurrency...

When You Should Blog and When You Should Tweet

I saw my like-minded, friend-that-I've-never-met Andrew Thompson Tweet a poll, posted above. I was about to reply with the following Tweet: "If I'm struggling to figure out how to capture a thought in just 1 Tweet, that's a sign that a blog post might be appropriate. I only use a thread, and no...

Friday Squid Blogging: New Report on Squid Markets

This report costs $2,000. Please don't buy it for me. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: Squid Eggs

Cool photo. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here. EDITED TO ADD 3/4: I just deleted a slew of comments about COVID 19. I may reinstate some of them later; right now I want some time t...

Friday Squid Blogging: More on the Giant Squid's DNA

Following on from last week's post, here's more information on sequencing the DNA of the giant squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...