[SECURITY] Fedora 31 Update: lilypond-2.19.84-3.fc31

LilyPond is an automated music engraving system. It formats music beautifully and automatically, and has a friendly syntax for its input files...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

Design/Logic Flaw

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

CVE-2020-17364 affects USVN (User-friendly SVN) prior to 1.0.9. The issue is an XSS vulnerability that can be triggered via SVN logs, with CVSS v3.1 base score 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRED, scope CHANGED; confidentiality/integrity impact LOW, availability NONE...

petfriendlyrentals.co.uk Cross Site Scripting vulnerability OBB-1229596

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Apple Pushes Back Against Ad Tracking in Safari and iOS 14

At WWDC, the company detailed a litany of privacy-friendly improvements to its software...

tattoo-friendly.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174622 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

F2fs-tools fsck.f2fs sanity_check_area_boundary code execution vulnerability

Summary An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

CVE-2020-7470

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field after a successful login with the Web Admin Password...

XSS Vulnerability at YUNUCMS Friendly Link API

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YUNUCMS Friendly Link API at the existence of XSS vulnerability, attackers can exploit the vulnerability to obtain the administrator's cookies...

Arbitrary File Deletion Vulnerability in DSCMS Enterprise Content Management System

DSCMS is Changsha Deshaun network based on ThinkPHP5.0 framework development, using PHP + Mysql architecture, is a suitable for the construction of enterprise website cms station building system features a comprehensive SEO-friendly dual-language open source CMS system. DSCMS enterprise station...

CAINE 11 - GNU/Linux Live Distribution For Digital Forensics Project, Windows Side Forensics And Incident Response

CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni Bassetti Bari - Italy. CAINE offers a complete forensic environment that is organized to integrate existing software tools as...

[SECURITY] Fedora 30 Update: limnoria-20191109-2.fc30

Supybot is a robust it doesn't crash, user friendly it's easy to configure and programmer friendly plugins are extremely easy to write Python IRC bot. It aims to be an adequate replacement for most existing IRC bots. It includes a very flexible and powerful ACL system for controlling access to...

Customer Experience and IT

Earlier this month, Akamai participated in CX Day, a global event dedicated to the customer experience. This was our first time celebrating, and I was lucky enough to join my fellow leaders for the event. I got my start at Akamai in Professional Services, so CX has always been central to my work,...

Maryam - Open-source intelligence (OSINT) Framework

Maryam is a full-featured open-source intelligenceOSINT framework written in Python. Complete with independent modules, built in functions, interactive help, and command completion, provides a command-line environment for used forensic and open-source intelligenceOSINT. Maryam is a completely...

Botb - A Container Analysis And Exploitation Tool For Pentesters And Engineers

BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform common container post...

PT-2019-19662 · Google +1 · Android Kernel +1

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue is related to a possible out of bounds read in the F2FS touch driver of the Android kernel due to improper input validation. This could lead to local information disclosure...

Quarantyne - Modern Web Firewall: Stop Account Takeovers, Weak Passwords, Cloud IPs, DoS Attacks, Disposable Emails

Automated web security made simple Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Java 8 Presentation Quarantyne is a reverse-proxy written in java. It fronts a web application or API and...