Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilities affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-2795 DESCRIPTION: An unspecifie...

nioh.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-644148 Description| Value ---|--- Affected Website:| nioh.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

visitlancashire.com XSS vulnerability

Open Bug Bounty ID: OBB-642542 Description| Value ---|--- Affected Website:| visitlancashire.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Monero: Attcker can trick monero wallet into reporting it recived twice as much with alternative tx_keypubs

Summary: multiple identical txpubkeys were patched, but you can still use alternative txpubkeys to get the same result. Description: An attacker can craft an XMR transaction which causes the receiving wallet to report that it received twice as much XMR as the attacker actually sent. The balance o...

Sn1per v5.0 - Automated Pentest Recon Scanner

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

royalairmaroc.com XSS vulnerability

Open Bug Bounty ID: OBB-640693 Description| Value ---|--- Affected Website:| royalairmaroc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jecl.si XSS vulnerability

Open Bug Bounty ID: OBB-640670 Description| Value ---|--- Affected Website:| jecl.si Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Augur: A miner can manipulate the gas reporting bond

Not entirely confident I've understood this system correctly, apologies if it's wrong and feel free to stop reading if you run into an obvious mistake... Summary: add summary of the vulnerability By creating a market with themselves as designated reporter and setting a very high gas price for the...

db.kondis.no XSS vulnerability

Open Bug Bounty ID: OBB-640537 Description| Value ---|--- Affected Website:| db.kondis.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hostname Determination Reporting

The script reports information on how the hostname of the target was determined. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

ocms.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-639571 Description| Value ---|--- Affected Website:| ocms.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Worse than Equifax: Personal records of 340M people leaked online

By Waqas Last year the credit reporting firm Equifax revealed how unknown This is a post from HackRead.com Read the original post: Worse than Equifax: Personal records of 340M people leaked online...

Citrix XenServer Multiple Security Updates

Description of Problem Two issues have been identified within Citrix XenServer, which could, if exploited, allow unprivileged code in a PV guest VM to cause the host to crash or become unresponsive. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and...

cvicte.sk XSS vulnerability

Open Bug Bounty ID: OBB-637707 Description| Value ---|--- Affected Website:| cvicte.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Configure Watson events

This policy setting allows you to configure whether or not Watson events are sent. If you enable or do not configure this setting, Watson events will be sent. If you disable this setting, Watson events will not be sent. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some...

elenazvezdnaya.ru XSS vulnerability

Open Bug Bounty ID: OBB-636568 Description| Value ---|--- Affected Website:| elenazvezdnaya.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Turn off handwriting recognition error reporting

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhandwritingerrorsharing.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off handwriting recognition error reporting Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Disable Windows Error Reporting

This policy setting turns off Windows Error Reporting, so that reports are not collected or sent to either Microsoft or internal servers within your organization when software unexpectedly stops working or fails. If you enable this policy setting, Windows Error Reporting does not send any problem...

Qualys Cloud Platform (VM, SCA, PC) 8.14 New Features

This new release of the Qualys Cloud Platform VM, SCA, PC, version 8.14, includes several new feature improvements across the apps such as Wallix AdminBastion support, EC2 scan improvements, VM reporting improvements, ESX/ESXi PC support for vCenter, PC STIG Report, and expanded technology suppor...

saintluc.fr Improper Access Control vulnerability

Open Bug Bounty ID: OBB-635248 Description| Value ---|--- Affected Website:| saintluc.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...