Unsafe Dependency Resolution

Overview com.paypal.selion:SeLion-Parent is a builds on top of TestNG and Selenium to provide a set of capabilities that get you up and running with WebDriver in a short time. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an...

First Hacker Convicted of 'SIM Swapping' Attack Gets 10 Years in Prison

A 20-year-old college student who stole cryptocurrency worth more than $5 million by hijacking victims' phone numbers has pleaded guilty and accepted a sentence of 10 years in prison. Ortiz was arrested last year on charges of siphoning millions of dollars in cryptocurrency from around 40 victims...

CVE-2018-6113

Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Input validation

Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

UBUNTU-CVE-2018-6113

Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Chaturbate: View Failed Approval and Pending videos other users

See videos uploaded by a user. The video is available when it waits for confirmation or is not accepted. Steps To Reproduce: 1 - Go victim page : https://chaturbate.com/p/akaxanxa/?tab=bio 2 - Open video : https://chaturbate.com/photovideos/photo/big/username/contentid/ 3 - Get random requests -...

bro -- array bounds and potential DOS issues

Corelight reports: Bro 2.5.5 primarily addresses security issues: Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

Security Bulletin: Anjali Test

Summary Pending...

chromium-browser: URL spoof in Navigation

Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

DEBIAN-CVE-2018-0491

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service relay crash because the KIST implementation allows a channel to be added more than once in the pending list...

UBUNTU-CVE-2018-0491

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service relay crash because the KIST implementation allows a channel to be added more than once in the pending list...

QuickBackup in vCenter plugin fails on Cisco Hyperflex Snapshot due to pending task

QuickBackup for a VM that resides on Cisco HyperFlex using the Veeam Plugin for vCenter always fails. The following output can be found in the task log:timestamp Info CiscoHXX.X.X...

SQL Injection Vulnerability in SaxueArticle Article Management System Pending.php Page

SaxueArticle article management system is a php+MySQL for the development of php article management system. A SQL injection vulnerability exists in the SaxueArticle article management system's pending.php page. The vulnerability stems from the program's failure to adequately filter user-supplied...

oficinas.ucalli.com XSS vulnerability

Vulnerable URL: http://oficinas.ucalli.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

agedcarereviews.com.au XSS vulnerability

Vulnerable URL: http://agedcarereviews.com.au/searchresult.php?sort=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1567522...

teatrosancarlo.it XSS vulnerability

Vulnerable URL: http://www.teatrosancarlo.it/it/search/index?querystring=%22%3E%3Csvg%20onload=alert/XSS/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 472747 VIP website...

Internet Bug Bounty: Out of bounds read in libcurl's IMAP FETCH response parser

Reported to the curl security mailing list on 6 October 2017. Acknowledged on 6 October 2017. Patched on 8 October 2017. Reported to distros@openwall on 17 October 2017. Public release on 23 October 2017. CVE Pending. Vulnerability An IMAP FETCH response line indicates the size of the returned...

compufirst.com XSS vulnerability

Vulnerable URL: http://www.compufirst.com/search/search.do?query=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=42512=true=true=0\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

torrco.com XSS vulnerability

Vulnerable URL:...

michaelnaik.com XSS vulnerability

Vulnerable URL: http://www.michaelnaik.com/advanced-search.php?formtype=uiadvanced=sales=1type=0searchtype=0type=0location=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3Edateadded=0minbed=0minprice=0maxprice=0maxrent=0rentperiod=0go=Search Details: Description| Value ---|---...