CVE-2018-18822

The CVE-2018-18822 issue affects Grapixel New Media v2.0 and is caused by SQL Injection through the pages.aspx pageref parameter. The vulnerability enables an attacker to manipulate backend queries due to unsanitized input, leading to potential data exposure or modification. The available referen...

CVE-2018-18822

Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter...

USN-3799-2: MySQL vulnerabilities

USN-3799-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.62 in...

Grapixel New Media 2 - pageref SQL Injection

Grapixel New Media 2 - pageref SQL Injection Exploit Title: Grapixel New Media 2 - 'pageref' SQL Injection Exploit Author: Berk Dusunur Google Dork: N/A Type: Web App Date: 2018-10-26 Vendor Homepage: http://www.grapixel.com Software Link: http://www.grapixel.com Affected Version: v2 Tested on:...

new-york-city-marathon.runnerspace.com XSS vulnerability

Open Bug Bounty ID: OBB-691198 Description| Value ---|--- Affected Website:| new-york-city-marathon.runnerspace.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : MySQL vulnerabilities (USN-3799-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3799-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...

New Relic: Swiftype key stored in JavaScript source

Hi, I am surfing on the newrelic website. I found a sensitive data including authentication key written in public accessible javascript file. Some 3rd party solution SwiftType newrelic using for crawling or search/suggestion. below is the link where you can find the authkey. which would be able t...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2018:2631-2) (Spectre)

This update for libvirt fixes the following issues : This new feature was added : bsc1094325, bsc1094725: libxl: Enable virsh blockresize for XEN guests This security issue was fixed: CVE-2017-5715: Additional fixes for the Spectre patches bsc1079869 The update package also includes non-security...

www1.nyc.gov XSS vulnerability

Open Bug Bounty ID: OBB-688387 Description| Value ---|--- Affected Website:| www1.nyc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

Pentagon Weapons Systems Are Easy Cyberattack Targets, New Report Finds

A new report says the Department of Defense "likely has an entire generation of systems that were designed and built without adequately considering cybersecurity."...

What's New in Performance

One of the things I like most about living in New England is the changing of seasons. I find myself looking forward, thinking about what's exciting about the next one. Each season offers something unique and special, and if you're ambitious enough to try new things, a variety of new opportunities...

mPulse Timeline - New Impactful Way to Gain Insight From Your mPulse Data

Introducing mPulse Timeline mPulse Timeline is the new interface of events, milestones & alerts, displayed in a simple & impactful format. Timeline is the first feature to be released for the new mPulse interface. It is a great way to showcase key insights in a friendly calendar timeline view,...

Microsoft Windows NTFS Local Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Server 2019 is a set of operating systems used for servers.Windows 10 is a set of operating systems used for personal computers. A local elevation of privileg...

DEBIAN-CVE-2018-18193

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

CVE-2018-18197

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

CVE-2018-18193

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

UBUNTU-CVE-2018-18197

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

CVE-2018-18197

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

UBUNTU-CVE-2018-18193

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...