auer-packaging.com XSS vulnerability

Open Bug Bounty ID: OBB-463727 Description| Value ---|--- Affected Website:| auer-packaging.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Buyers Beware of Tampered Gift Cards

Prepaid gift cards make popular presents and no-brainer stocking stuffers, but before you purchase one be on the lookout for signs that someone may have tampered with it. A perennial scam that picks up around the holidays involves thieves who pull back and then replace the decals that obscure the...

openSUSE Security Update : virtualbox (openSUSE-2017-1267)

This update for virtualbox fixes the following issues : - CVE-2017-10392: A local user can exploit a flaw in the Oracle VM VirtualBox Core component to partially access data, partially modify data, and deny service - CVE-2017-10407: A local user can exploit a flaw in the Oracle VM VirtualBox Core...

The vulnerability of the FTP server Pure-FTPd in the Fedora operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FTP server Pure-FTPd for the Fedora operating system is related to packaging errors. As a result, after an update, the original configuration is ignored, and the service starts working with the default configuration. Exploiting this vulnerability allows a remote attacker ...

CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

Default configuration

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

CVE-2017-12170

CVE-2017-12170 : Downstream Fedora pure-ftpd 1.0.46-1 suffers a packaging error where the original configuration is ignored after update, causing the service to run with default security-related settings. Upstream pure-ftpd is not affected. Fed(er)a advisories document a fix by loading the correc...

CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

Oracle MySQL Server Local Vulnerability (CNVD-2017-34511)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Server: Packaging subcomponent of the MySQL Server component in Oracle...

CVE-2015-3211

php-fpm allows local users to write to or create arbitrary files via a symlink attack...

App Layering/Unidesk: Published Image or Packaging Machine Blue Screens with Code STOP 0x75640007

Published image or Unidesk desktop or Packaging Machineblue-screens with code 0x75640007...

The vulnerability of the PowerShell command interpreter for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PowerShell command interpreter for Windows operating systems is related to deficiencies in access control during the packaging of CIM instances as PSObjects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2017-1000010

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution...

Fedora 26 : mediawiki (2017-d3aedd5dc7)

Due to a mistake in packaging, the releases 1.27.2 and 1.28.1 did not contain the fix for SyntaxHighlightGeSHi. This new release does contain that fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

How to remove or cancel incomplete tasks in Citrix App Layering

This guide covers how to remove and cancel half finished and incomplete tasks in Citrix App Layering. For example, you may have deleted a packaging machine off of your hypervisor, but the action remains incomplete in the management console...

OPENSUSE-SU-2017:1593-1 Security update for chromium

This update to Chromium 59.0.3071.104 fixes the following security issues: CVE-2017-5087: Sandbox Escape in IndexedDB CVE-2017-5088: Out of bounds read in V8 CVE-2017-5089: Domain spoofing in Omnibox Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging...

OPENSUSE-SU-2017:1591-1 Security update for chromium

This update to Chromium 59.0.3071.104 fixes the following security issues: CVE-2017-5087: Sandbox Escape in IndexedDB CVE-2017-5088: Out of bounds read in V8 CVE-2017-5089: Domain spoofing in Omnibox Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging...