Mitsubishi QS061P-A1-K PLC Detection

Binary data 754934.prm...

Mitsubishi QS061P-A2-K PLC Detection

Binary data 754936.prm...

Omron CJ1W-PH41U Position Controller Detection

Binary data 755981.prm...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Privilege Escalation

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks

A team of security researchers has discovered several vulnerabilities in various implementations of OpenPGP and S/MIME email signature verification that could allow attackers to spoof signatures on over a dozen of popular email clients. The affected email clients include Thunderbird, Microsoft...

WordPress Print My Blog plugin <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF vulnerability found by Magnus K. Stubman in WordPress Print My Blog plugin versions = 1.6.5. Solution Update the WordPress Print My Blog plugin to the latest available version at least 1.6.6...

CVE-2019-10741

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...

CVE-2019-10741

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...

Design/Logic Flaw

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...

CVE-2019-10741

K-9 Mail 5.600 exposes a vulnerability where the original quoted HTML in a specially crafted benign-looking email included in (digitally signed) reply messages can contain conditional HTML that renders differently in another client. This can be abused to display content to a third party while pre...

CVE-2019-10741

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...

A week in security (February 25 – March 3)

Last week, we delved into the realm of K-12 schools and security, explored the world of compromised websites and Golang bruteforcers, and examined the possible realms of pay for privacy. We also looked at identity management solutions, Google’s Universal Read Gadget, and did the deepest of dives...

KDE KAuth Input Validation Error Vulnerability

KDE KAuth is a cross-platform authentication API from the KDE community. A security vulnerability exists in versions of KDE KAuth prior to 5.55. An attacker can exploit the vulnerability to bypass restrictions...

k-telecom.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-719507 Description| Value ---|--- Affected Website:| k-telecom.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...

k-obr.spb.ru XSS vulnerability

Open Bug Bounty ID: OBB-708721 Description| Value ---|--- Affected Website:| k-obr.spb.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

k-a-b.ch XSS vulnerability

Open Bug Bounty ID: OBB-706359 Description| Value ---|--- Affected Website:| k-a-b.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sanjacinto.k12.ca.us XSS vulnerability

Open Bug Bounty ID: OBB-705709 Description| Value ---|--- Affected Website:| sanjacinto.k12.ca.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

k-haus.at XSS vulnerability

Open Bug Bounty ID: OBB-704014 Description| Value ---|--- Affected Website:| k-haus.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

K-iwi Framework SQL Injection Vulnerability

K-iwi Framework is an open source application development framework developed using PHP. A SQL injection vulnerability exists in K-iwi Framework version 1775. A remote attacker can exploit this vulnerability by sending the 'usergroupid' parameter or the 'userid' parameter to admin/user/group/upda...