CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

CVE-2017-12156 affects Moodle 3.x, with an XSS in the contact form on the non-respondents page of non-anonymous feedback. The vulnerability enables script injection (confidentiality/integrity impact listed as low) with user interaction required and network access. Public details show Fedora advis...

Stored Cross-Site Scripting Vulnerability in Hulu 3 Floor App

Hulu Man 3F APP is a player exchange community platform launched by Guangzhou Manju Network Technology Co. A stored cross-site scripting vulnerability exists in the "Feedback" section of Hulu Man 3F APP. An attacker can insert malicious js code into the page to obtain user cookies and other...

PT-2017-12371

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description The issue is related to a cross-site scripting XSS flaw in the contact form on the "non-respondents" page in non-anonymous feedback. Recommendations For Moodle versions 3.x, update to a version that includes a f...

CVE-2017-12156: Improper Neutralization of Input During Web Page Generation

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe RoboHelp, Flash Player, and ColdFusion. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe Security...

Microsoft Releases September 2017 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of a system. US-CERT encourages users and administrators to review Microsoft's September 2017 Security Update Summary and Deployment...

Cisco Releases Security Advisories

Cisco has released advisories describing Apache Struts 2 vulnerabilities potentially affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Cisco Security Advisories...

Apache Software Foundation Releases Security Update

The Apache Software Foundation has released a security update to address a vulnerability in Struts 2. A remote attacker could exploit this vulnerability to take control of an affected system. US-CERT encourages users and administrators to review the Apache Security Bulletin and Vulnerability Note...

Beware! Viral Sarahah App Secretly Steals Your Entire Contact List

Are you also one of those 18 Million users using SARAHAH? You should beware of this app because the anonymous feedback application may not be as private as it really sounds. Sarahah is a newly launched app that has become one of the hottest iPhone and Android apps in the past couple of weeks,...

Deployment of Secure Hub is failing -"VPP internal Error"

Deployment of Secure Hub will fail with the error message "Sending installation commandCitrix Secure Hub-VPP internal" Device Logs will show below errors 2017-06-23T09:20:17.478+1000 | | ERROR | pool-10-thread-1 | com.citrix.ios.vpp.wsclient.request.VPPRequest | Apple feedback: The sToken has bee...

The Next Generation of the Rapid7 Community

Rapid7s community is evolving! For the past several years, community.rapid7.com has been our platform for news and knowledge spanning blogs, questions, discussion, and documentation. We have tried to ensure that our community site has been a source of pragmatic, down-to-earth information and...

Mozilla Releases Security Update

Mozilla has released a security update to address multiple vulnerabilities in Thunderbird. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Mozilla Security Advisory for Thunderbird 52.3...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

Akamai Is Named A Leader In Gartner's Magic Quadrant For Web Application Firewalls

"Don't work for recognition, but do work worthy of recognition" - H. Jackson Brown. A friend sent this quote to me after I explained to her my ambivalence about being recognized by Gartner as a "Leader" in their Web Application Firewall Magic Quadrant. I had mixed feelings because I wanted to...

Highly Customizable Raspberry Pi USB Attack Platform: P4wnP1

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W required for HID backdoor. Introduction the Windows LockPicker unlock Windows boxes with weak passwords, fully automated by attaching P4wnP1 the HID covert channel backdoor Get remote...

Udemy: No password length restriction

The reporter thought that we did not limit password length, but we do, we just don't feed back an error for it...

Symantec Releases Security Update

Symantec has released an update to address vulnerabilities in the Symantec Messaging Gateway. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Symantec Security Advisory and...

Moving Beyond EMET II – Windows Defender Exploit Guard

Since we last wrote about the future of EMET and how it relates to Windows 10 back in November 2016 see Moving Beyond EMET, we have received lots of invaluable feedback from EMET customers and enthusiasts regarding the upcoming EMET end of life. Based on that feedback, we are excited to share...