PT-2018-16798

Name of the Vulnerable Software and Affected Versions ML Report versions 2.00.000.0000 through 2.18.628.5980 Description The issue allows a remote attacker to download and execute a remote arbitrary file by setting the arguments to the activex method, which can be leveraged for code execution...

Wallarm New Open Source Module and Kaggle Hackathon

A key element of any security solution, whether its a WAF, NGWAF, RASP or even a SIEM or a classic IDS, is the ability to correctly detect whether an incoming API request is malicious. The traditional way to do it is using signatures and regular expressions regex. Some sets of signatures are...

Wallarm joins CNCF to promote Kubernetes security

Wallarm has recently joined the Linux Foundation and its sister organization, Cloud Native Computing Foundation. Wallarm will be contributing its AI/ML security expertise within the LF and CNCF communities to support the sustainability and adoption of open source technologies. Wallarm and its...

aws-ml-helper (0.0.0), bamboo-lib (>=0.0.37, <=0.0.39) +7 more potentially affected by CVE-2018-1000805 via paramiko (>=2.4.0, <=2.4.1)

paramiko PYPI version =2.4.0, =0.0.37, =0.0.3, =0.0.1, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2018-1000805 Source advisory: OSV:GHSA-F2J6-WRHH-V25M...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824: Improper Neutralization of Input During Web Page Generation

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

PT-2018-16218

Name of the Vulnerable Software and Affected Versions X-Pack Machine Learning versions prior to 6.2.4 X-Pack Machine Learning versions prior to 5.6.9 Description A cross-site scripting XSS issue was found. If an attacker can inject data into an index with a running ML job, they could obtain...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: GHSA-232R-66CG-79PX...

Investing in the right innovation

RSA is around the corner which means tens of thousands of people will descend on Moscone Center in San Francisco, CA. Hundreds of innovative young companies will look for customers, props, and capital especially at the Early Stage Expo!. Venture capitalists will look for opportunities to invest a...

WAP-billing Trojan-Clickers on rise

During the preparation of the "IT threat evolution Q2 2017" report I found several common Trojans in the "Top 20 mobile malware programs" list that were stealing money from users using WAP-billing - a form of mobile payment that charges costs directly to the user's mobile phone bill so they don't...

[SECURITY] Fedora 26 Update: ocaml-4.04.0-10.fc26

OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML family of languages. This package comprises two batch compilers a fast bytecode compiler and an optimizing native-code compiler, an interactive toplevel system, parsing tools Lex,Yacc, a replay...

CentOS 6 : ocaml (CESA-2017:0565)

An update for ocaml is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ml-interim.fr XSS vulnerability

Vulnerable URL: http://www.ml-interim.fr/jobs-modern-list/?jobtitle=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=induspharma=Trouver+un+poste Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Pixel Dungeon ML - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pixel Dungeon ML published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 22 Update: libsedml-0.3.1-4.fc22

C++ library that fully supports SED-ML Simulation Experiment Description Markup Language for SBML as well as CellML models for creation of the description just as for the execution of Simulation Experiments. This project makes use of libSBML XML layer as well as code generation as starting point ...

[SECURITY] Fedora 23 Update: libsedml-0.3.1-4.fc23

C++ library that fully supports SED-ML Simulation Experiment Description Markup Language for SBML as well as CellML models for creation of the description just as for the execution of Simulation Experiments. This project makes use of libSBML XML layer as well as code generation as starting point ...

urps-ml-paca.org XSS vulnerability

Vulnerable URL: http://www.urps-ml-paca.org/?s=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49398...