3586 matches found
Security update for libvirt (important)
openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2019:1288-1 Rating: important References: 1081516 1102604 1104662 1106420 1108086 1108395 1112182 1117058 1118952 1120813 1123642 1124667 1125665 1126325 1127458 1130129 Cross-References: CVE-2019-3840 Affected...
CVE-2018-18276
XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel...
Cross site scripting
XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel...
CVE-2018-18276
XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel...
CVE-2018-18276
CVE-2018-18276 is an XSS vulnerability in the ProFiles 1.5 component for Joomla! exploited through the name or path parameter when creating a new folder in the administrative panel. The affected item is the ProFiles 1.5 Joomla! component; the root cause is an input handling issue that allows user...
CVE-2018-18276
XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel...
PT-2019-9570
Name of the Vulnerable Software and Affected Versions Joomla! ProFiles component version 1.5 Description A security issue exists in the ProFiles component for Joomla!, specifically when creating a new folder in the administrative panel. The name or path parameter is vulnerable to XSS attacks...
CVE-2018-18276: Improper Neutralization of Input During Web Page Generation
XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel...
April 25, 2019—KB4493453 (Preview of Monthly Rollup)
None None...
Is Privacy Really iPhone? Researchers Weigh in on Apple's Targeted Ad Tracking
Apple has a consistent track record of implementing privacy controls, which it has been touting via a series of saturating “Privacy? That’s iPhone” television ads. Yet, though it may be deservedly capitalizing on the increasing privacy-consciousness of consumers out there and the negative headlin...
Ellen DeGeneres giveaway scam spreading on social media
Scammers are pushing multiple fake Facebook profiles of Ellen DeGeneres, popular US TV show host and producer, with the goal of tricking people into jumping through a few money-making hoops. This isn’t a sophisticated scam. It isn’t hacking the Gibson. It won’t be the focus of a cutting edge...
Cobalt Strike. Walkthrough for Red Teamers
What is Cobalt Strike? Raphael Mudge is the creator of Cobalt Strike CS, around 2010 he released a tool titled Armitage, which is described by wikipedia as a graphical cyber-attack management for the Metasploit Project, to put this more bluntly, Armitage is a gui that allows you to easily navigat...
CVE-2018-4436
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2...
CVE-2018-4436
CVE-2018-4436 involves a certificate validation issue in configuration profiles on Apple devices. Affected products/versions include iOS, tvOS, and watchOS prior to versions 12.1.1, 12.1.1, and 5.1.2 respectively. Root cause (per the sources) is improper certificate validation within configuratio...
CVE-2018-4436
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2...
PT-2019-10935
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Description: A certificate validation issue existed in configuration profiles, which has been addressed with additional checks. Recommendations: For iO...
CVE-2018-4436: Improper Certificate Validation
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2...
Logic flaw vulnerability exists in UsualToolCMS of Chengdu Comfidonte Network Technology Co.
UsualToolCMS UTCMS is a content management system and rapid site building framework. A logic flaw vulnerability exists in UsualToolCMS v8.0 build 190101. The vulnerability stems from the program not verifying the identity of the data passed by the processing user. An attacker could overstep his/h...
PT-2019-16736 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: moodle versions 3.1 to 3.1.15 moodle versions 3.4 to 3.4.6 moodle versions 3.5 to 3.5.3 moodle versions 3.6 to 3.6.1 Description: A flaw was found in the software where the /userpix/ page did not properly escape users' full names. These names...