CVE-2018-15187

CVE-2018-15187 concerns PHP Scripts Mall’s advanced-real-estate-script v4.0.9, where a Cross-Site Request Forgery (CSRF) flaw in edit-profile.php enables unauthorized actions. The CVSS details indicate a high-severity impact (CVSS3 8.0, HIGH; vector: NETWORK, LOW attack complexity, PR: LOW, UI: R...

CVE-2018-15188

The vulnerability CVE-2018-15188 affects PHP Scripts Mall advanced-real-estate-script v4.0.9, where remote attackers can cause a denial of service (page structure loss) by submitting crafted JavaScript in the Name field of a profile. This is documented across CVE/NVD and CNVD entries; exploitatio...

CVE-2018-15189

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

Partner Perspectives: Attivo + Carbon Black Integration Delivers Advanced, Continuous Threat Management and Response

Joseph Salazar is the Technical Deception Officer for Attivo Networks. Cyber attackers have repeatedly proven that they can gain access to the networks of even the most security-savvy organizations. Whether the attacker finds their way in through the use of stolen credentials, zero-day...

UBUNTU-CVE-2017-9120

PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a long string because of an Integer overflow in mysqlirealescapestring...

Carbon Black Announces Cb LiveOps, a New Offering on the Cb Predictive Security Cloud (PSC), Delivering Real-Time Query and Response

Today is another exciting day for Carbon Black! Earlier, we announced the release of Cb LiveOps™- the newest offering built on our Cb Predictive Security Cloud™ PSC. a platform delivering complete endpoint prevention, detection, and response, all from a single agent. Cb LiveOps extends core...

10 Endpoint Security Problems Solved by the Cloud – Responding Quickly To Threats

In this week’s installment of 10 endpoint security problems solved by the cloud, we’re going to step away from last week’s topic, identifying problems, and examine how the cloud helps organizations respond quickly to threats. Speed is Critical Attackers move quickly, and your ability to respond...

chromium-browser: Use after free in WebRTC

Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

chromium-browser: Heap buffer overflow in WebRTC

Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

chromium-browser: Type confusion in WebRTC

Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

Google Chrome memory misreference vulnerability (CNVD-2018-17042)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in WebRTC in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

Design/Logic Flaw

CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS text message interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the...

CVE-2017-3217

CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS text message interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the...

Low: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4 Update 3 security update

An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

real-nekretnine.com XSS vulnerability

Open Bug Bounty ID: OBB-648220 Description| Value ---|--- Affected Website:| real-nekretnine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

RHEL 6 : kernel-rt (RHSA-2018:2165)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2165 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Moderate: Red Hat Security Advisory: kernel-rt security, and enhancement update

Updated kernel-rt packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

housing.com XSS vulnerability

Open Bug Bounty ID: OBB-642821 Description| Value ---|--- Affected Website:| housing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google WebRTC VP9 Out-of-Bounds Memory Access Vulnerability

WebRTC, whose name derives from the acronym Web Real-Time Communication, is a technology that supports real-time voice or video conversations in web browsers. A security vulnerability exists in Google WebRTC VP9. An attacker can exploit the vulnerability to cause Chrome to crash. The vulnerabilit...