PHPTPoint Mailing Server Using File Handling 1.0 Arbitrary File Read

Exploit Title: phptpoint Mailing Server Using File Handling 1.0 - Arbitrary File Read Date: 2018-10-25 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: https://www.phptpoint.com/projects/ignou-mca-projects/ Version: 1.0...

[SECURITY] [DSA 4304-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4304-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 23, 2018 https://www.debian.org/security/faq -...

Linus Torvalds Apologizes For His Rude Behavior—Takes Time Off

What just happened would definitely gonna surprise you. Linus Torvalds—father of the Linux open-source operating system—finally admitted his behavior towards other developers in the Linux community was hurting people and Linux. In a surprising move this weekend, Torvalds apologized for insulting...

WordPress Arigato Autoresponder And Newsletter 2.5 SQL Injection / XSS

Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2018-08-22...

WordPress Arigato Autoresponder And Newsletter 2.5 SQL Injection / XSS Vulnerabilities

Exploit for php platform in category web applications Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2018-08-22...

Sympa Open Redirect Vulnerability

Sympa is an extensible and highly customizable mailing list software. The software provides multiple templates, custom authentication backends and authentication scripts, and support for various mailing list backends LDAP, SQL, text, list or others. An open redirect vulnerability exists in the...

Debian DSA-4285-1 : sympa - security update

Michael Kaczmarczik discovered a vulnerability in the web interface template editing function of Sympa, a mailing list manager. Owner and listmasters could use this flaw to create or modify arbitrary files in the server with privileges of sympa user or owner view list config files even if...

floraldaily.com XSS vulnerability

Open Bug Bounty ID: OBB-669683 Description| Value ---|--- Affected Website:| floraldaily.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

heritageresorts.com XSS vulnerability

Open Bug Bounty ID: OBB-663226 Description| Value ---|--- Affected Website:| heritageresorts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reSIProcate 1.10.2 Heap Overflow Exploit

Exploit for multiple platform in category dos / poc CVE ID: CVE-2018-12584 TIMELINE Bug report with test code sent to main reSIProcate developers: 2018-06-15 Patch created by Scott Godin: 2018-06-18 CVE ID assigned: 2018-06-19 Patch committed to reSIProcate repository: 2018-06-21 Advisory first...

Multiple Cobalt Personality Disorder

Introduction Despite the notion that modern cybersecurity protocols have stopped email-based attacks, email continues to be one of the primary attack vectors for malicious actors — both for widespread and targeted operations. Recently, Cisco Talos has observed numerous email-based attacks that ar...

sciencecafenijmegen.nl XSS vulnerability

Open Bug Bounty ID: OBB-621297 Description| Value ---|--- Affected Website:| sciencecafenijmegen.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] [DSA 4205-1] Advance notification for upcoming end-of-life for

Debian oldstable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4205-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2018 https://www.debian.org/security/faq...

[SECURITY] [DSA 4203-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4203-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4200-1] kwallet-pam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4200-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4194-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4194-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 06, 2018 https://www.debian.org/security/faq -...

Internet Bug Bounty: CVE-2018-6797: A crafted regular expression can cause a heap buffer write overflow in Perl 5 giving a remote attacker control over bytes written

An attacker supplies a regular expression containing one or more \xDF characters after an escape putting the regexp into unicode matching mode, such as a \N escape. Each \xDF character adds one byte of overflow, and any other text in the regular expression is written in order, providing the...

fusionaveda.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-597618 Description| Value ---|--- Affected Website:| fusionaveda.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

tonywoods.com XSS vulnerability

Open Bug Bounty ID: OBB-597555 Description| Value ---|--- Affected Website:| tonywoods.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

comedytheater.nl XSS vulnerability

Open Bug Bounty ID: OBB-597208 Description| Value ---|--- Affected Website:| comedytheater.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...