8380 matches found
New Relic: WordPress username enumeration (/author)
@rootbakar identified a previously-reported issue where authors could be viewed from an endpoint within our WordPress blog. As authors are intended to be public, this was closed as not having any security impact to the blog...
September 26, 2018—KB4458469 (OS Build 17134.320)
None None...
CVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
CVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
CVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
Design/Logic Flaw
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
UBUNTU-CVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
CVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
CVE-2018-6053
Removed by vendor...
CVE-2018-6053
CVE-2018-6053 is an information-leak vulnerability in Google Chrome’s New Tab Page caused by an inappropriate implementation. In affected versions prior to 64.0.3282.119, a local attacker could view website thumbnail images after clearing browser data by presenting a crafted HTML page. The issue ...
nzguide.newzealand.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-678797 Description| Value ---|--- Affected Website:| nzguide.newzealand.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
weblinks.newzealand.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-678796 Description| Value ---|--- Affected Website:| weblinks.newzealand.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
newzealand.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-678794 Description| Value ---|--- Affected Website:| newzealand.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
100.newzealand.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-678785 Description| Value ---|--- Affected Website:| 100.newzealand.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Elastic Cloud Enterprise (ECE) Incorrect Authentication Vulnerability
Elastic Cloud Enterprise ECE is a suite of software packages for managing, monitoring, and configuring Elasticsearch, Kibana, and X-Pack from Elasticsearch Netherlands. Elastic Cloud Enterprise ECE suffers from an incorrect authentication vulnerability that can be exploited by an attacker to add ...
new-zealand-nz.net Open Redirect vulnerability
Open Bug Bounty ID: OBB-678281 Description| Value ---|--- Affected Website:| new-zealand-nz.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
Tec4Data SmartCooler
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Tec4Data Equipment: SmartCooler Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the device to shut down by...
Notebook Pro 2.0 - Denial Of Service (PoC)
Exploit Title : Notebook Pro 2.0 - Denial Of Service PoC Exploit Author : Ali Alipour WebSite : http://Alipour.it Date: 2018-09-14 Vendor Homepage : http://www.stokedonit.com/apps/notebook-pro/ Software Link Download : https://www.microsoft.com/store/apps/9WZDNCRDMC76 Tested on : Windows 10 -...