CVE-2006-5044

Unspecified vulnerability in Prince Clan Princeclan Chess component compcchess 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors...

RHEL 6 : openstack-glance (RHSA-2013:0209)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0209 advisory. These packages provide a service code name Glance that acts as a registry for virtual machine images. It was found that when the OpenStack Glance...

Ruijie Networks NBR800G 安全漏洞

Ruijie Networks NBR800G is a cloud-hosted secure router from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks NBR800G NBRRGOS11.16B4P9 version, which originates from a command execution vulnerability in the parameter prince in the file /itboxpi/networksafe.php...

jamesweb.co.uk Cross Site Scripting vulnerability OBB-3441213

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

secureflintl.org Cross Site Scripting vulnerability OBB-3303041

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pousoalegre.mg.gov.br Cross Site Scripting vulnerability OBB-3188108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

princelegal.com.au Cross Site Scripting vulnerability OBB-2835911

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Did Saudi Crown Prince use Israeli spyware to hack Jeff Bezos’s iPhone?

By Waqas According to the UN high commissioner for human rights, Bezos’s iPhone was hacked using NSO Group’s spyware called... This is a post from HackRead.com Read the original post: Did Saudi Crown Prince use Israeli spyware to hack Jeff Bezos’s iPhone?...

Everything We Know About the Jeff Bezos Phone Hack

A UN report links the attack on Jeff Bezos' iPhone X directly to Saudi Arabian Crown Prince Mohammed bin Salman...

The Decade Big-Money Email Scams Took Over

In the last few years, the "Nigerian prince" scams have gotten a major upgrade...

Before He Spammed You, this Sly Prince Stalked Your Mailbox

A reader forwarded what he briefly imagined might be a bold, if potentially costly, innovation on the old Nigerian prince scam that asks for help squirreling away millions in unclaimed fortune: It was sent via the U.S. Postal Service, with a postmarked stamp and everything. In truth these old...

@panosoft/prince-server (>=0.1.0, <=0.1.2), componentdoc (>=0.9.0, <=0.9.3) +2 more potentially affected by CVE-2016-10591 via prince (>=1.0.5, <=1.2.1)

prince NPM version =1.0.5, =0.1.0, =0.9.0, =0.9.0, =0.0.1, =0.2.4 Source cves: CVE-2016-10591 Source advisory: OSV:GHSA-CR79-9PWF-R6F5...

Downloads Resources over HTTP in prince

Affected versions of prince insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

Friday Squid Blogging: Dead Squid on Prince Edward Island

A beach on Prince Edward Island is littered with dead squid. No one knows why. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Prince Code Execution Vulnerability

Prince is a use of JavaScript to convert XML/HTML files into PDF documents API. A security vulnerability exists in Prince that originates when the program downloads an executable file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by intercepting the respon...

Man In The Middle (MitM)

prince is vulnerable to man-in-the-middle MitM attacks. This is because the libraries download zipped resources via HTTP, allowing MitM attacks. It may also cause remote code execution RCE by swapping out the requested zipped file with an attacker controlled zipped file if the attacker is on the...

CVE-2016-10591

Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince1 CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested tarball with an attacker controlled...

CVE-2016-10591

CVE-2016-10591 affects Prince (Node API for executing PrinceXML via the prince(1) CLI). The vulnerability arises because Prince downloads zipped resources over HTTP, making it susceptible to Man-in-the-Middle attacks that could swap the requested tarball/executable with a malicious one. In networ...

CVE-2016-10591

Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince1 CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested tarball with an attacker controlled...

SilverStripe CMS 3.6.2 - CSV Excel Macro Injection

SilverStripe CMS 3.6.2 - CSV Excel Macro Injection Exploit Title: SilverStripe CMS - 3.6.2 CSV Excel Macro Injection Vendor Homepage: https://www.silverstripe.org/ Software Link: https://www.silverstripe.org/download Discovered by: Ishaq Mohammed Contact: https://twitter.com/securityprince Websit...