How to avoid getting caught in a “Groundhog Day” loop of security issues

It’s Cyber Security Awareness Month and it made me think about one of my favorite movies, called Groundhog Day. Have you ever seen it? Bill Murray is the cynical weatherman, Phil Connors, who gets stuck in an endless loop where he repeats the same day over and over again until he “participates in...

Congratulations to our Query of the Month Winner for August 2019!

Our Query of The Month competition recognizes the top community-shared query that provides value to other Osquery users. To determine the query of the month, our team selects the customer query that has the most engagement or helps solve an important problem. The winner of the contest each month...

DomainMOD Cross-Site Scripting Vulnerability

DomainMOD is an open source application for managing your domain names and other Internet assets in a central location. A cross-site scripting vulnerability exists in the daterange parameter in reporting/domains/cost-by-month.php in DomainMOD 4.13 and earlier versions. An attacker could exploit...

DomainMod 4.13 Cross Site Scripting

Exploit Title: DomainMod = 4.13 - Cross-Site Scripting Date: 30 August 2019 Exploit Author: Damian Ebelties https://zerodays.lol/ Vendor Homepage: https://domainmod.org/ Version: = 4.13 Tested on: Ubuntu 18.04.1 CVE: CVE-2019-15811 The software 'DomainMOD' is vulnerable for Cross-Site Scripting i...

CVE-2019-15811

In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS...

PT-2019-14402 · Domainmod · Domainmod

Name of the Vulnerable Software and Affected Versions: DomainMOD versions prior to 4.14 Description: The issue concerns a security problem where the daterange parameter in the reporting/domains/cost-by-month.php file is vulnerable to XSS attacks. Recommendations: For DomainMOD versions prior to...

September is National Preparedness Month: Be Prepared, Not Scared

National Preparedness Month NPM promotes family and community disaster and emergency planning. This year’s theme is “Prepared, Not Scared.” Although most people understand that being prepared is essential to getting through an emergency such as a natural disaster, there is less awareness about th...

Congratulations to our Query of the Month Winner for July 2019!

Our Query of The Month competition recognizes the top community-shared query that provides value to other Osquery users. To determine the query of the month, our team selects the customer query that has the most engagement or helps solve an important problem. The winner of the contest each month...

(RHSA-2019:1862) Low: Red Hat OpenShift Enterprise one-month end-of-life notice

As part of the maintenance phase, qualified security patches of Critical or Important impact, as well as select mission-critical bug-fix patches, were released for Red Hat OpenShift Enterprise 3.6 and 3.7. After July 31st, 2019, customers will not receive those updates. Red Hat OpenShift Containe...

WordPress the-holiday-calendar plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. the-holiday-calendar plugin is used in one of the calendar plugin . A cross-site scripting vulnerability exists i...

Cross site scripting

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...

CVE-2015-9270

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...

Malwarebytes is a champion of National Cybersecurity Awareness Month

October is here. For most of us in the US cybersecurity industry, it’s the month when we commemorate National Cybersecurity Awareness Month NCSAM. For those who are unfamiliar with this campaign, NCSAM generally aims at driving awareness for safe Internet use, whether you're a regular consumer or...

CVE-2015-9270: Improper Neutralization of Input During Web Page Generation

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...

PT-2018-4579

Name of the Vulnerable Software and Affected Versions The Holiday Calendar plugin versions prior to 1.11.3 Description A security issue exists due to the presence of XSS in the plugin, which can be exploited via the thc-month parameter. Recommendations For versions prior to 1.11.3, update to...

gertrudebell.ncl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-681321 Description| Value ---|--- Affected Website:| gertrudebell.ncl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

September is National Preparedness Month

National Preparedness Month is a good opportunity to assess your emergency preparedness. While general preparedness is essential to getting through an emergency related to a natural disaster, the same is true of preparing for a cyber-related event, such as identity theft or a ransomware infection...

PT-2018-11285

Name of the Vulnerable Software and Affected Versions GreenCMS version 2.3.0603 Description The issue allows remote attackers to obtain sensitive information by making a direct request for log files, specifically Data/Log/year month day.log. Recommendations For GreenCMS version 2.3.0603, consider...

Out-of-Bounds Read

libapr-1.so is vulnerable to out-of-bounds read. A malicious user can pass a invalid month value to the aprtimeexp or the aprosexptime functions to cause an out-of-bounds read that can lead to sensitive information being disclosed or the application crashing...

PT-2018-4885

Name of the Vulnerable Software and Affected Versions Atlassian Jira Mail.ru Calendar plugin versions prior to 2.5.0.61 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the Name field in a Create Calendar action. The vulnerability is also related to the...