Intel® Omni-Path Fabric Manager GUI Advisory

Summary: A potential security vulnerability in Intel® Omni-Path Fabric Manager GUI may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11117 Description: Improper permissions in the installer for...

Intel® Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise Advisory

Summary: Potential security vulnerabilities in Intel® Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise RSTe may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEI...

Intel® NVMe and Intel® RSTe Driver Pack Advisory

Summary: A potential security vulnerability in the Intel® Storage NVMe and Rapid Storage Technology RSTe driver packs may allow escalation of privilege. Vulnerability Details: CVEID: CVE-2018-12131 Description: Permissions in the driver pack installers for IntelR NVMe before version 4.0.0.1007 an...

WordPress WP-Ajax-Form-Pro 5.0.2 Shell Upload

Exploit Title : WordPress WP-Ajax-Form-Pro Plugins 5.0.2 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org ajaxformpro.com Software Download Link : ajaxformpro.com Software Script Owner and...

Intel® Parallel Studio XE for Windows* Vulnerability Advisory

Summary: A potential security vulnerability in Intel® Parallel Studio XE for Windows may allow for an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3704 Description: Improper directory permissions in t...

WordPress Better WordPress reCAPTCHA plugin <= 2.0.3 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Gabriel Avramescu in WordPress Better WordPress reCAPTCHA plugin versions = 2.0.3. Solution WordPress Better WordPress reCAPTCHA plugin was closed on 2018 November 9 and is no longer available for download. Please deactivate and...

Intel® Data Migration Software Improper Permissions Advisory

Summary: A potential security vulnerability in Intel® Data Migration Software may allow Escalation of Privilege. Intel is releasing Intel® Data Migration Software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-12160 Description: DLL injection vulnerability...

INTEL-SA-00086 Detection Tool DLL Injection Issue Advisory

Summary: A potential security vulnerability in the INTEL-SA-00086 Detection Tool may allow a privileged user to execute arbitrary code. Intel is releasing INTEL-SA-00086 Detection Tool updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3686 Description: Code...

Fedora 27 : 1:epiphany (2018-de5457b0a2)

Ensure search engine migration does not fail 794645 - Do not open adblock filters when automatic open downloads is enabled 794646 - Fix crash destroying sync service 794728 - Fix CVE-2018-11396/CVE-2018-12016 795740 - Do not use Fanboy's Annoyance adblock list by default 796245 - Fix a couple...

OEcms 3.1 Cross Site Scripting

Title: ======= OEcms v3.1 - Reflected Cross-Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

Dimofinf CMS 3.0.0 Cross Site Scripting

Title: ======= Dimofinf CMS Version 3.0.0 - Reflected Cross-Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative...

[SECURITY] [DSA 4211-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4211-1 [email protected] https://www.debian.org/security/ Luciano Bello May 25, 2018 https://www.debian.org/security/faq -...

hyundaigabrielanjou.com XSS vulnerability

Open Bug Bounty ID: OBB-578498 Description| Value ---|--- Affected Website:| hyundaigabrielanjou.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu: Security Advisory (USN-3584-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3584-1: sensible-utils vulnerability

Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker could possibly use this issue with a specially crafted URL to conduct an argument injection attack and execute arbitrary code...

Fedora 26 : flatpak (2018-b5ecac9405)

This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 - Fix dbus proxy vulnerability in authentication phase - Make permission handling ignore unknown permissions for...

Zoom Linux Client 2.0.106600.0904 Buffer Overflow Vulnerability

The binary /opt/zoom/ZoomLauncher is vulnerable to a buffer overflow because it concatenates a overly long user input to a stack variable without checking if the destination buffer is long enough to hold the data. The binary also has important security features like canary turned off. The client...

Zoom Linux Client 2.0.106600.0904 Command Injection Vulnerability

The binary /opt/zoom/ZoomLauncher is vulnerable to command injection because it uses user input to construct a shell command without proper sanitization. The client registers a scheme handler zoommtg:// and this makes possible to trigger the vulnerability remotely. Version 2.0.106600.0904 is...

Critical: Red Hat Security Advisory: dnsmasq security update

An update for dnsmasq is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

LIFE CMS Directory Traversal

Title: ======= LIFE CMS - Directory Traversal Introduction: ============== Life Educacional comprises a set of online computer tools capable of bringing agility and control in all activities of a teaching institution, whether public or private, or basic, basic, secondary or higher education. It i...