10415 matches found
CVE-2018-10570
Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...
CVE-2018-10570
Frog CMS 0.9.5 has XSS in /install/index.php via the 'config''adminusername' field...
Cosmo Arbitrary PHP Code Execution Vulnerability
Cosmo is a set of CMS Content Management System built on AngularJS and PHP. A security vulnerability exists in Cosmo version 1.0.0Beta6. The vulnerability can be exploited to execute arbitrary PHP code via the Database Prefix field in the Database Info screen on the localhost/Cosmo/install.php li...
DEBIAN-CVE-2018-1106
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...
JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install)
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE...
Installing updates or third party software on the ELM
As a general rule, you should not install software on your ELM. While there are some circumstances where it will work fine, it is likely to cause software dependency problems that will block App Layering updates. App Layering is very particular about the Linux software packages and versions...
Beers with Talos EP27: Smart Install, Vuln Process Realities, and Professional Wrestling
Beers with Talos BWT Podcast Episode 27 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast EP27 Show Notes: Recorded 4/13/18 - We just upgraded all our gear, so naturally we had a straight tech...
SMBrute - SMB Protocol Bruteforce
SMBrute is a program that can be used to bruteforce username and passwords of servers that are using SMB Samba. Install SMBrute $ git clone https://github.com/m4ll0k/SMBrute.git smbrute $ cd smbrute $ pip3 install pysmb, humanfriendly $ python3 smbrute.py Usage: $ python3 smbrute.py -h...
Oracle Java SE Multiple Vulnerabilities (April 2018 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 10 Update 1, 8 Update 171, 7 Update 181, or 6 Update 191. It is, therefore, affected by multiple vulnerabilities related to the following components : - AWT - Concurrency - Hotspot - Install -...
Oracle Java SE Multiple Vulnerabilities (April 2018 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 10 Update 1, 8 Update 171, 7 Update 181, or 6 Update 191. It is, therefore, affected by multiple vulnerabilities related to the following components : - AWT - Concurrency - Hotspot - Install -...
CVE-2018-2811
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE...
Design/Logic Flaw
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE...
CVE-2018-2811
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE...
Unspecified Vulnerability in Oracle Java SE (CNVD-2018-09065)
Java SE stands for Java Platform Standard Edition and is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. An unspecified vulnerability exists in the Install component of Oracle Java SE. An attacker could exploit this vulnerabilit...
Fedora Update for libofx FEDORA-2018-1b3a73b45f
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XIUNOBBS V4.0.4 suffers from a logic flaw vulnerability
Xiuno BBS is an open source lightweight forum system. A logic flaw vulnerability exists in XIUNOBBS V4.0.4 install/index.php. An attacker can exploit this vulnerability to cause a system reinstallation...
JVN#92220486: The installer of PhishWall Client Internet Explorer edition may insecurely load Dynamic Link Libraries
PhishWall Client Internet Explorer edition provided by SecureBrain Corporation is anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer edition contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427...
Joyplus CMS Information Disclosure Vulnerability
Joyplus CMS is an efficient video movie website management system built with PHPmysql, independently developed by Zhi Jing Technology, which has been used as a backend management system for free products Joyplus Video, and after continuous improvement, it now has a complete functional system and...