Error: "Personal vDisk Inventory Is Not Up To Date. Update the Inventory in the Master Image, And Then Try Again" In Studio

New deployed target device shows "Personal vDisk inventory is not up to date. Update the inventory in the master image, and then try again." in studio...

CVE-2017-7871

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php challenge parameter...

PT-2017-17964

Name of the Vulnerable Software and Affected Versions trollepierre/tdm versions prior to 2017-04-13 Description The issue is related to a reflected XSS in the tdm-master/webhook.php file, specifically affecting the challenge parameter. Recommendations For versions prior to 2017-04-13, consider...

SQL Injection Vulnerability in Cache Master Web Appliance

Cache Master is able to optimize caching for web videos including mobile videos, as well as smart caching for http downloads of web pages and web images. A SQL injection vulnerability exists in the Cache Master web appliance. An attacker can use this vulnerability to log into the backend of a...

PT-2018-8428

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions prior to 2016.3.6 Description The issue allows compromised salt-minions to impersonate the salt-master. Recommendations For versions prior to 2016.3.6, update to version 2016.3.6 or later to resolve the issue...

PT-2017-16385

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 2015.8.13 and earlier, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 Description The issue allows arbitrary command execution on a salt-master via Salt's ssh client. Users of Salt-API and salt-ssh could execu...

CVE-2017-7391

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386: Improper Neutralization of Input During Web Page Generation

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7387

TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php episodeID parameter...

New Clues Surface on Shamoon 2's Destructive Behavior

Researchers on Monday reported progress in piecing together some of the missing pieces of the Shamoon 2 puzzle that have been eluding them when it comes to lateral network movement and execution of the Disttrack malware component used in past campaigns. Shamoon 2 uses a combination of legitimate...

wireshark security and bug fix update

1.8.10-25.0.1 - Fix ocfs2 dissector John Haxby orabug 21505640 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.8.10-25 - rebuilt 1.8.10-24 - Related: 1245887 - segfault with CVE-2013-4075 capture - valgrind error with CVE-2015-3812 capture 1.8.10-23 - Resolves: 12381...

CVE-2017-7205

A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

PT-2017-17573

Name of the Vulnerable Software and Affected Versions imdbphp version 5.1.1 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data, specifically the name variable, passed to the "imdbphp-master/demo/search.php" API endpoint. This allows an...

PT-2017-17574

Name of the Vulnerable Software and Affected Versions GamePanelX-V3 version 3.0.12 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data passed to the "GamePanelX-V3-master/ajax/ajax.php" API endpoint. This allows an attacker to execute...

CVE-2017-6907

An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data content passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-6909: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Shimmie = 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "shimmie2-master/ext/chatbox/history/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

PT-2017-17406

Name of the Vulnerable Software and Affected Versions SiberianCMS versions prior to 4.10.0 Description The issue is caused by insufficient filtration of user-supplied data passed to the "SiberianCMS-master/errors/500.php" URL, allowing an attacker to execute arbitrary HTML and script code in a...

PT-2017-17409

Name of the Vulnerable Software and Affected Versions Shimmie versions prior to 2.5.1 Description The issue is caused by insufficient filtration of user-supplied data passed to the "shimmie2-master/ext/chatbox/history/index.php" URL, allowing an attacker to execute arbitrary HTML and script code ...

PT-2017-17407

Name of the Vulnerable Software and Affected Versions Open.GL versions prior to 2017-03-13 Description The issue exists due to insufficient filtration of user-supplied data passed to the "Open.GL-master/index.php" URL. This allows an attacker to execute arbitrary HTML and script code in a browser...