[SECURITY] [DLA 2087-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u5 CVE ID : CVE-2019-18625 CVE-2019-18792 Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata. CVE-2019-18625 It was possible to bypass/evade any tcp based signature by faking a...

CVE-2020-7104

The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php totalquestions parameter...

PT-2020-19372

Name of the Vulnerable Software and Affected Versions chained-quiz plugin version 1.1.8.1 Description The issue is related to reflected XSS. It can be exploited via the total questions parameter in the "wp-admin/admin-ajax.php" API endpoint. Recommendations For chained-quiz plugin version 1.1.8.1...

Frequently Asked Questions - Critical - Unsupported - SA-CONTRIB-2019-077

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466procedure---own-project---unsupported...

WordPress YITH WooCommerce Questions and Answers plugin <=1.1.9 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Questions and Answers plugin versions =1.1.9. Solution Update the WordPress YITH WooCommerce Questions and Answers plugin to the latest available version at least 1.2.0...

CVE-2017-18461

cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...

CVE-2018-20881

cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

PT-2019-10310

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows for self-stored XSS on the Security Questions login page. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...

CVE-2018-20875: Improper Neutralization of Input During Web Page Generation

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

PT-2019-10303

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows self XSS in the WHM Security Questions interface. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...

CVE-2018-20881: Improper Neutralization of Input During Web Page Generation

cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...

NETGEAR WiFi Routers JWNR2010v5 and R6080 Authentication Bypass

An authentication bypass vulnerability exists in NETGEAR WiFi Routers. Successful exploitation of this vulnerability allows remote attackers to bypass authentication and retrieve security questions answers...

NETGEAR WiFi Router JWNR2010v5 / R6080 - Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.as...

NETGEAR WiFi Router JWNR2010v5 R6080 - Authentication Bypass

NETGEAR WiFi Router JWNR2010v5 R6080 - Authentication Bypass Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage:...

Netgear WiFi Router JWNR2010v5 / R6080 - Authentication Bypass

Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...

Netgear WiFi Router JWNR2010v5 / R6080 Authentication Bypass

Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...

US Journalist Detained When Returning to US

Pretty horrible story of a US journalist who had his computer and phone searched at the border when returning to the US from Mexico. After I gave him the password to my iPhone, Moncivias spent three hours reviewing hundreds of photos and videos and emails and calls and texts, including encrypted...