CVE-2019-15233

CVE-2019-15233 affects the Live:Text Box macro in Old Street Live Input Macros for Confluence, with XSS in versions before 2.11 that can steal an Administrator session cookie. The issue arises from injected JavaScript in a Confluence element, enabling session hijacking when a page containing the ...

Exploit for Cross-site Scripting in Oldstreetsolutions Live_Input_Macros

CVE-2019-15233 FAB-2019-00157 Vulnerability discoverd by me...

PT-2019-14029

Name of the Vulnerable Software and Affected Versions Old Street Live Input Macros app versions prior to 2.11 for Confluence Description The issue concerns the Live:Text Box macro in the Old Street Live Input Macros app, which has a cross-site scripting XSS problem. This can lead to the theft of...

CVE-2015-9319: Improper Neutralization of Input During Web Page Generation

The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser...

CVE-2019-15233: Improper Neutralization of Input During Web Page Generation

The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie...

CVE-2019-15107

An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability...

CVE-2016-10835

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging SEC-107...

BlockDev Sp. Z o.o: App Takeover ( makerdao.herokuapp.com )

Takeover of an old app that is no longer used by the company...

CIS Releases Newsletter on Cleaning Up Data and Devices

The Center for Internet Security CIS July Newsletter reminds users to properly dispose of old or unused data and devices. Without careful management of online accounts, cloud storage, physical storage, and electronic devices, users could inadvertently disclose sensitive information that can be...

UBUNTU-CVE-2019-2731

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.7.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

McAfee Agent Elevation of Privilege Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. An elevation of privilege vulnerability exists in McAfee MA versions prior to 5.6.1 HF2. An attacker could exploit t...

UBUNTU-CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made...

PT-2019-12899

Name of the Vulnerable Software and Affected Versions GLPI Teclib Fields plugin versions through 1.9.2 Description The issue allows SQL Injection via the container id and old order parameters to the "ajax/reorder.php" endpoint by an unauthenticated user. Recommendations For versions through 1.9.2...

PT-2019-16921 · Ibm · Ibm Spectrum Protect +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager Server IBM Spectrum Protect versions 7.1 through 8.1 Description: The issue allows a local user to replace existing databases by restoring old data. Recommendations: For versions 7.1 through 8.1, update to a version...

DEBIAN-CVE-2019-5811

Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

kernel: Race condition in sound system can lead to denial of service

In the Linux kernel versions 4.12, 3.10, 2.6, and possibly earlier, a race condition vulnerability exists in the sound system allowing for a potential deadlock and memory corruption due to use-after-free condition and thus denial of service. Due to the nature of the flaw, privilege escalation...

Google Chrome Sensitive Information Disclosure Vulnerability (CNVD-2019-17516)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Appcache in Google Chrome versions prior to 75.0.3770.80. An attacker can exploit the vulnerability to obtain sensitive information...

Mozilla: Stealing of cross-domain images using canvas

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...

GHSA-5WW9-J83M-Q7QX Information exposure in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

SAS 2019: Fake News Peddlers Adopt Clever New Trick to Fool Facebook, Twitter

Fake news peddlers have devised a cunning new way to stump Facebook, Twitter and others cracking down on lies and half-truths spreading on social media. Instead of linking to fake news, bad actors are now linking to posts promoting older news articles that may no longer be accurate – but won’t be...