CVE-2018-11454

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

Cross Namespace Escalation

github.com/kubernetes/kubernetes is vulnerable to cross namespace escalation attacks. A malicious user can submit a HPA request against another namespace that they have no permissions on and use it to manipulate resources...

Microsoft Edge UXSS-the adventure of the endless world-vulnerability warning-the black bar safety net

Today we will work together to onlookers under the Microsoft Edge there is some design problem-when these issues are combined it will form a universal cross-site scripting attacks UXSS in. If you want to figure out this vulnerability, but you're just not a security researcher, you can try so...

Ubuntu 10.10 / 11.04 / 11.10 : Puppet vulnerability (USN-1365-1)

It was discovered that Puppet would allow remote ralsh under certain circumstances. An attacker on an authenticated puppet node could exploit this to view or manipulate resources on other Puppet nodes. Note that Tenable Network Security has extracted the preceding description block directly from...

WordPress BackWPup 2.1.4 Code Execution

Sense of Security - Security Advisory - SOS-11-012 Release Date. 17-Oct-2011 Vendor Notification Date. 14-Oct-2011 Product. BackWPUp Platform. WordPress Affected versions. 2.1.4 Severity Rating. High Impact. System access Attack Vector. Remote without authentication Solution Status. Upgrade to...