CVE-2018-14890

Vectra Networks Cognito Brain and Sensor Web Management Console is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 4.2. The issue exists in the Web Management Console and can allow injection of arbitrary scripts/HTML. The available connected records consistently descri...

CVE-2018-14891

The CVE-2018-14891 entry concerns the Management Console of Vectra Networks Cognito Brain and Sensor prior to version 4.3, with a local privilege escalation vulnerability. Affected product: Cognito Brain and Sensor management console. Vulnerability: local privilege escalation; root cause details ...

PT-2018-12781

Name of the Vulnerable Software and Affected Versions Vectra Networks Cognito Brain and Sensor versions prior to 4.3 Description The Management Console in Vectra Networks Cognito Brain and Sensor contains a local privilege escalation issue. Recommendations For versions prior to 4.3, update to...

PT-2018-12780

Name of the Vulnerable Software and Affected Versions Vectra Networks Cognito Brain and Sensor versions prior to 4.2 Description The issue is related to a cross-site scripting XSS vulnerability in the Web Management Console. This type of vulnerability allows an attacker to inject malicious script...

PT-2018-12779

Name of the Vulnerable Software and Affected Versions Vectra Networks Cognito Brain and Sensor versions prior to 4.3 Description The issue concerns a local code execution vulnerability in CouchDB, which is part of Vectra Networks Cognito Brain and Sensor. Recommendations For versions prior to 4.3...

CVE-2018-14891: Undefined Security Weakness

Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability...

CVE-2018-14890: Improper Neutralization of Input During Web Page Generation

Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting XSS vulnerability in the Web Management Console...

CVE-2018-14889: Improper Input Validation

CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability...

brain-map.org XSS vulnerability

Open Bug Bounty ID: OBB-629482 Description| Value ---|--- Affected Website:| brain-map.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

A week in security (May 21 – May 27)

Last week we told you about a Mac cryptominer using XMRig, an overview of Dreamcast related scams, part 1 of decoding Emotet, and what to do about bad coding habits that die hard. We also published the results of our second CrackMe contest. Other news How a pioneer of machine learning became one ...

Malicious PHP Script Infects 2,400 Websites in the Past Week

A botnet dubbed Brain Food is giving webmasters indigestion with related attacks that push bogus diet pills and IQ-boosting pills via web pages hosted on legitimate sites. So far, spammers have been successful, thanks to an effective Hypertext Preprocessor PHP script also called Brain Food that h...

brain-cancer.canceraustralia.gov.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-539625 Description| Value ---|--- Affected Website:| brain-cancer.canceraustralia.gov.au Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated...

Internet Bug Bounty: RCE via ssh:// URIs in multiple VCS

I'd like to submit an RCE issue within Git SVN and Mercurial, the CVEs are: CVE-2017-9800 Subversion CVE-2017-1000116 Mercurial hg CVE-2017-1000117 Git Further Info can be found at: http://blog.recurity-labs.com/2017-08-10/scm-vulns And product specific:...

Friday Squid Blogging: Giant Squids Have Small Brains

New research: In this study, the optic lobe of a giant squid Architeuthis dux, male, mantle length 89 cm, which was caught by local fishermen off the northeastern coast of Taiwan, was scanned using high-resolution magnetic resonance imaging in order to examine its internal structure. It was evide...

Moderate: Red Hat Security Advisory: Red Hat Gluster Storage 3.2.0 security, bug fix, and enhancement update

An update is now available for Red Hat Gluster Storage 3.2 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

connectivity.brain-map.org XSS vulnerability

Vulnerable URL: http://connectivity.brain-map.org/transgenic/search?pagenum=0size=26paging=falsematch=false=true=trueterm='".type=line Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Brain Test - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Brain Test published at the 'play' market has multiple vulnerabilities...

Brain Training Day~brain power - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Brain Training Daybrain power published at the 'play' market has multiple vulnerabilities...

Sudoku Brain - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku Brain published at the 'play' market has multiple vulnerabilities...

クロスワード 無料 560問以上が楽しめる脳トレ・暇つぶし！ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application クロスワード 無料 560問以上が楽しめる脳トレ・暇つぶし！ published at the 'play' market has multiple vulnerabilities...