Apple Downplays Impact of iBoot Source Code Leak

Apple is responding to reports the leak of its iBoot source code is a serious security blow to iOS devices. In statement released Thursday it confirmed the leak, but emphasized the source code is three years old and would have no impact on iOS device security. “Old source code from three years ag...

venmores.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-551083 Description| Value ---|--- Affected Website:| venmores.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Prototype Pollution

Overview lodash-rails is a lodash for the Rails asset pipeline. Affected versions of this package are vulnerable to Prototype Pollution. The utilities function allow modification of the Object prototype. If an attacker can control part of the structure passed to this function, they could add or...

Unspecified Vulnerability in Oracle Hospitality Cruise Shipboard Property Management System Component

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. Oracle Hospitality Cruise Shipboard Property Management System is one of the shipboard property management components of the Oracle Hospitality Cruise...

CVE-2018-2621

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Mobile Gangway and Mustering. The supported version that is affected is 7.3.874. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2621

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Mobile Gangway and Mustering. The supported version that is affected is 7.3.874. Easily exploitable vulnerability allows unauthenticated attacker with...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Mobile Gangway and Mustering. The supported version that is affected is 7.3.874. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2621

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Mobile Gangway and Mustering. The supported version that is affected is 7.3.874. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2621

The CVE-2018-2621 entry concerns Oracle Hospitality Cruise Shipboard Property Management System, subcomponent Mobile Gangway and Mustering, affected in version 7.3.874. The connected documents confirm a network-based vulnerability exploitable without authentication, accessible via HTTP, with impa...

CVE-2018-2621

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Mobile Gangway and Mustering. The supported version that is affected is 7.3.874. Easily exploitable vulnerability allows unauthenticated attacker with...

Canadian Police Charge Operator of Hacked Password Service Leakedsource.com

Canadian authorities have arrested and charged a 27-year-old Ontario man for allegedly selling billions of stolen passwords online through the now-defunct service Leakedsource.com. The now-defunct Leakedsource service. On Dec. 22, 2017, the Royal Canadian Mounted Police RCMP charged Jordan Evan...

CVE-2018-5221

Multiple buffer overflows in BarCodeWiz BarCode before 6.7 ActiveX control BarcodeWiz.DLL allow remote attackers to execute arbitrary code via a long argument to the 1 BottomText or 2 TopText property...

CVE-2017-1000482

A member of the Plone 2.5-5.1rc1 site could set javascript in the homepage property of his profile, and have this executed when a visitor click the home page link on the author page...

RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.0.9 security update on RHEL 6 (Important) (RHSA-2018:0002)

"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0002 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Re...

PYSEC-2018-71

A member of the Plone 2.5-5.1rc1 site could set javascript in the homepage property of his profile, and have this executed when a visitor click the home page link on the author page...

EAP-7: Wrong privileges on multiple property files

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

MGASA-2018-0025 Updated libplist packages fix security vulnerability

The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data CVE-2017-5209. The main function in plistutil.c in libimobiledevice libplist allowed attackers to...

EAP-7: Wrong privileges on multiple property files

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

EAP-7: Wrong privileges on multiple property files

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

Joomla RealEstateManager 4.2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Joomla RealEstateManager 4.2.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/realestatemanager/ Product: 'Joomla RealEstateManage...