Cyber resilience for the modern enterprise

Many organizations are undergoing a digital transformation that leverages a mix of cloud and on-premises assets to increase business efficiency and growth. While increased dependence on technology is necessary for this transformation, and to position the business for success, it does pose risks...

Cyber resilience for the modern enterprise

Many organizations are undergoing a digital transformation that leverages a mix of cloud and on-premises assets to increase business efficiency and growth. While increased dependence on technology is necessary for this transformation, and to position the business for success, it does pose risks...

One GRC Manager’s Practical Approach to GDPR Readiness

With about four months to go before the GDPR becomes effective many companies are still struggling with where to start. You’re not alone. According to this survey, the majority of companies are slow off the mark. On top of that, companies require resources and budget to prepare for and comply wit...

Atlassian Bamboo Cross-Site Scripting Vulnerability (CNVD-2018-04563)

Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A cross-site scripting vulnerability exists in the plan configure branches resource in...

CVE-2018-6577

SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...

CVE-2017-18082

The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a branch...

A Top Employer in Canada for the Second Year in a Row

Trend Micro has been protecting governments, businesses and consumers from cyber-threats for more than 28 years. Right from the start, our founders were keen to emphasize the important role played by corporations in society as a whole. To that end, we’ve always been an active participant in...

visiononmorphett.com.au XSS vulnerability

Open Bug Bounty ID: OBB-533861 Description| Value ---|--- Affected Website:| visiononmorphett.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bplans.com XSS vulnerability

Open Bug Bounty ID: OBB-524419 Description| Value ---|--- Affected Website:| bplans.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

PHP Scripts Mall MLM Forex Market Plan Script SQL Injection Vulnerability

PHP Scripts Mall MLM Forex Market Plan Script is a PHP based online distribution website script from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall MLM Forex Market Plan Script version 2.0.4. The vulnerability can be exploited by a remote attacker to inject SQL...

Atlassian Bamboo Remote Code Execution Vulnerability (CNVD-2018-00580)

Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A remote code execution vulnerability exists in Atlassian Bamboo versions 2.7.0 through to...

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

Sql injection

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17635

The CVE-2017-17635 entry concerns MLM Forex Market Plan Script version 2.0.4, with a SQL Injection vulnerability exploitable via input parameters: news_detail.php newid and event_detail.php eventid. Public records (NVD, CNVD, CVE List) confirm the affected script and the injection vector, indicat...

Users with 'Plan Admin' privileges can change Project Name

h3. Summary Users whom have Plan level Admin privileges, but not Project level Admin privileges are able to change the Project name from /chain/admin/config/editChainDetails.action?buildKey=\projkey-\plankey h3. Steps to Reproduce h1. Step 1 Create Project with key TSTPR Create Plan within TSTPR...

Users with 'Plan Admin' privileges can change Project Name

h3. Summary Users whom have Plan level Admin privileges, but not Project level Admin privileges are able to change the Project name from /chain/admin/config/editChainDetails.action?buildKey=\projkey-\plankey h3. Steps to Reproduce h1. Step 1 Create Project with key TSTPR Create Plan within TSTPR...

Code injection

Indeo Otter through 1.7.4 mishandles a "" substring in an initial DP payload, which allows remote attackers to cause a denial of service crash or possibly have unspecified other impact, as demonstrated by the Plan Editor...

CVE-2017-17086

Indeo Otter through 1.7.4 mishandles a "" substring in an initial DP payload, which allows remote attackers to cause a denial of service crash or possibly have unspecified other impact, as demonstrated by the Plan Editor...

CVE-2017-17086

Indeo Otter through 1.7.4 mishandles a "" substring in an initial DP payload, which allows remote attackers to cause a denial of service crash or possibly have unspecified other impact, as demonstrated by the Plan Editor...