7372 matches found
MS16-029: Description of the security update for Office 2016: March 8, 2016
None None...
uniroma3.it XSS vulnerability
Open Bug Bounty ID: OBB-133157 Description| Value ---|--- Affected Website:| uniroma3.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
OpenXchange User Enumeration
Hi@all, there is an information disclosure in OpenXchange prior 7.8. An authenticated user can enumerate all imap user folders. If you browse the PoC you get an permission denied error, but the folder’s name is reflected into the page in json format. About Open Xchange: Open-Xchange2 develops,...
Code injection
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for...
Shadows-IT Designs Local File Inclusion
No description provided by source...
Government Agencies Audit For Juniper Backdoor
Most U.S. government agencies have until Feb. 4 to audit their IT infrastructure for the use of backdoored Juniper Networks’ Netscreen firewalls. Letters went out late last week from the House Oversight & Government Reform Committee to the leaders of the various agencies asking them to provide th...
it-markt.ch IFRAME Injection vulnerability
Vulnerable URL: http://www.it-markt.ch/News/2014/09/17/Vesa-stellt-neue-Audio-Video-Schnittstelle-vor.aspx?exURL=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:29 GMT Vulnerability type:| IFRAME Injection...
poker770.it Open Redirect vulnerability
Vulnerable URL: http://www.poker770.it/redirection.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank...
Error: "This version of Citrix Receiver does not support selected encryption" When Launching XenApp Application
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Workspace app is the new universal app for all workspace services, that will encompass all...
MS16-007: Description of the security update for Windows: January 12, 2016
None None...
markdown-it and NodeBB HTML Injection Vulnerabilities
markdown-it is a parser product. NodeBB is a forum system developed by the Design Create Play team and built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. An HTML injection vulnerability exists in markdown-it versions prior to 4.1.0 and NodeBB versions...
markdown-it and NodeBB HTML injection vulnerability (CNVD-2016-00135)
markdown-it is a parser product. NodeBB is a forum system developed by the Design Create Play team and built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. An HTML injection vulnerability exists in markdown-it versions prior to 4.1.0 and NodeBB versions...
How to become an Information Security Expert with the CISSP Certification
If you dream of making it big in the IT security community, the CISSP certification is a necessary milestone. Having this certification to your credit portrays a sense of commitment to the security profession and shows potential employers that you have a strong knowledge base to excel in this...
Jail Authorities Mistakenly Early Released 3,200 Prisoners due to a Silly Software Bug
Washington State Department of Corrections DoC is facing an investigation after it early released around 3,200 prisoners over the course of 13 years, since 2002, when a bug was introduced in the software used to calculate time credits for inmates' good behavior. The software glitch led to a...
Safety warning: the domestic more than 3 0 0 Station juniper network equipment by back door influence-vulnerability warning-the black bar safety net
In 2 0 1 5 year 1 2 on 1 8 November,Juniper's official website released a security Bulletin,noted that in their Netscrren firewall ScreenOS software found unauthorized code,which relates to the 2 security questions,one is in the VPN authentication code is placed in the back door,allowing an...
AlienVault Unified Security Management: Real-Time Threat Detection Starting on Day 1
As organizations expand their IT infrastructure to match their evolving business models and meet changing regulatory requirements, they often find that their networks have become extremely complex and challenging to manage. A primary concern for many IT teams is detecting threats in the mountain ...
Password expiration vulnerability in multiple IBM products
IBM Maximo Asset Management is a product of IBM Corporation.Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.SmartCloud Control Desk SCCD is a unified asset and service management software.Tivoli IT Asset...
Security Bypass Vulnerabilities in Multiple IBM Products (CNVD-2015-07939)
IBM Maximo Asset Management is a product of IBM Corporation.Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.SmartCloud Control Desk SCCD is a unified asset and service management software.Tivoli IT Asset...
Millions of IoT Devices Using Same Hard-Coded CRYPTO Keys
Millions of embedded devices, including home routers, modems, IP cameras, VoIP phones, are shareing the same hard-coded SSH Secure Shell cryptographic keys or HTTPS HTTP Secure server certificates that expose them to various types of malicious attacks. A new analysis by IT security consultancy SE...
