CVE-2018-1000840

Processing Foundation Processing version 3.4 and earlier contains a XML External Entity XXE vulnerability in loadXML function that can result in An attacker can read arbitrary files and exfiltrate their contents via HTTP requests. This attack appear to be exploitable via The victim must use...

CVE-2018-1000840

Processing Foundation Processing version 3.4 and earlier contains a XML External Entity XXE vulnerability in loadXML function that can result in An attacker can read arbitrary files and exfiltrate their contents via HTTP requests. This attack appear to be exploitable via The victim must use...

CVE-2018-1000840

The CVE-2018-1000840 entry is confirmed: Processing Foundation Processing versions 3.4 and earlier are affected by an XML External Entity (XXE) vulnerability in the loadXML() function. This flaw allows an attacker to read arbitrary files and exfiltrate their contents via HTTP requests, exploitabl...

mxnet.incubator.apache.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-712301 Description| Value ---|--- Affected Website:| mxnet.incubator.apache.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3...

Microsoft Team Foundation Server 2010 Service Pack 1

Describes the Microsoft Team Foundation Server 2010 Service Pack 1 new features and issues that are fixed by the service pack.SummaryThis article describes information about Team Foundation Server TFS 2010 Service Pack 1 SP1. The largest component of the TFS 2010 SP1 is the set of core product...

Security Update for Microsoft SharePoint Foundation 2013 (KB4461558) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Foundation 2010: December 11, 2018

Description of the security update for SharePoint Foundation 2010: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the security update for SharePoint Foundation 2013: December 11, 2018

Description of the security update for SharePoint Foundation 2013: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2018-12407: Buffer overflow with ANGLE library when using VertexBuffer11 module CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 CVE-2018-18492: Use-after-free with select element CVE-2018-18493: Buffer overflow in...

communitypharmacyfoundation.org XSS vulnerability

Open Bug Bounty ID: OBB-709892 Description| Value ---|--- Affected Website:| communitypharmacyfoundation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

arcusfoundation.org XSS vulnerability

Open Bug Bounty ID: OBB-709157 Description| Value ---|--- Affected Website:| arcusfoundation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

SolarWinds Server & Application Monitor (SAM) Detection (Windows SMB Login)

SMB login-based detection of SolarWinds Server & Application Monitor SAM. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

The vulnerability of the Microsoft Team Foundation Server software, related to errors in the authentication process, allows a violator to execute arbitrary commands.

The vulnerability of the Microsoft Team Foundation Server TFS exists due to the lack of basic authentication when exchanging data between the software platform and the search service. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

choicefoundation.org XSS vulnerability

Open Bug Bounty ID: OBB-705351 Description| Value ---|--- Affected Website:| choicefoundation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Happy graduation, Envoy!

Envoy, the new darling of the DevOps community, performs the role of a service and edge proxy. With advanced features such as timeouts, rate limiting, circuit breaking, load balancing, retries, stats, logging, and distributed tracing are required to handle network failures in a fault tolerant and...

IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2018-24367)

IBM Rational Collaborative Lifecycle Management CLM and so on are the products of IBM Corporation in the U.S.A. IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational IBM Rational Collaborative Lifecycle Management CLM is a collaborative...

Phoenix Contact mGuard Device Manager Detection (Windows SMB Login)

SMB login-based detection of Phoenix Contact mGuard Device Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Software Foundation Apache HTTP Server Remote Code Execution (CVE-2002-0392) - Ver2

A remote code execution vulnerability exists in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cryptojacking Attack Targets Make-A-Wish Foundation Website

Hackers have been stealing CPU-cycles from visitors to the Make-A-Wish Foundation’s international website in order to mine for Monero cryptocurrency. Researchers said they found the CoinIMP mining script embedded in the non-profit’s website, and that it was taking advantage of the Drupalgeddon 2...

Security Updates for Microsoft Team Foundation Server (November 2018)

The Microsoft Team Foundation Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Team Foundation Server TFS does not enable basic authorization on the communication betwee...