528 matches found
UBUNTU-CVE-2020-13628
Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...
CVE-2020-13628
Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...
CVE-2020-13627
Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...
CVE-2020-8816
creationtimestamp| type| source ---|---|--- 2020-03-30 20:32:29+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6348 2020-04-02 20:06:09+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/1549 2020-05-28 18:50:18+00:00| seen|...
Hardware Router CTF
Here at Pen Test Partners we love hardware and also love a good CTF. So here's how I figured out my way through the hardware CTF that PTP set as a pre-requisite for some interviews. I'm pretty new to hardware, so learned quite a bit along the way. We have now moved on to a new 'interview' CTF so,...
SprintWork 2.3.1 Local Privilege Escalation
Exploit Title: SprintWork 2.3.1 - Local Privilege Escalation Exploit Author: boku Date: 2020-02-13 Vendor Homepage: https://veridium.net Software Link: https://veridium.net/filesu/spx/exe/SprintWork-Setup.exe Version: 2.3.1 Tested On: Windows 10 32-bit Vulnerability Overview: SprintWork v2.3.1 x8...
Misp-Dashboard - A Dashboard For A Real-Time Overview Of Threat Intelligence From MISP Instances
A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of each...
PT-2022-8585 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle version 3.8 Description: The issue concerns stored cross-site scripting. In Moodle, messages required extra sanitizing before updating the conversation overview to prevent this risk. Recommendations: For Moodle version 3.8, ensure that...
Basic Citrix Licensing Information
How does Citrix licensing work? Citrix product goes through a three-step process to check out licenses; information on Licensing overview, visit Citrix Documentation athttps://docs.citrix.com/en-us/licensing/current-release.html Available License types? Visit Citrix Documentation...
Cross site scripting
A Cross-site scripting XSS vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22...
CVE-2012-1159
Moodle before 2.2.2: Overview report allows users to see hidden courses...
Design/Logic Flaw
Moodle before 2.2.2: Overview report allows users to see hidden courses...
CVE-2012-1159
Moodle before 2.2.2: Overview report allows users to see hidden courses Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ affected...
CVE-2012-1159
Moodle before 2.2.2: Overview report allows users to see hidden courses...
Presentation Template: Build Your 2020 Security Plan
As the end of the year approaches, security decision makers are creating their 2020 plans and running them by management for approval. In most cases, this means requesting and making the case for the necessary resources that need to be allocated, while still providing value to the organization. T...
CVE-2019-0345
A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java Administrator System Overview, versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted XML file and trick the application server into leaking authentication credentials for its own SAP...
Johnson Controls exacqVision Enterprise System Manager
1. EXECUTIVE SUMMARY CVSS v3 6.7 Vendor: Johnson Controls Equipment: exacqVision Enterprise System Manager ESM Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow malicious code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS...
BD Alaris Gateway Workstation
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BD Becton, Dickinson and Company Equipment: Alaris Gateway Workstation Vulnerabilities: Improper Access Control, Unrestricted Upload of File with Dangerous Type 2. RISK EVALUATION Exploitation of...
Cross site scripting
A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...