1278 matches found
sistema.araraquara.sp.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-619825 Description| Value ---|--- Affected Website:| sistema.araraquara.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Threat Outbreak Alert RuleID32722: Email Messages Distributing Malicious Software on May 8, 2018
Medium Alert ID: 57826 First Published: 2018 May 8 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32722 may contain the following files: Name | Size ...
limeira.sp.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-607690 Description| Value ---|--- Affected Website:| limeira.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross-site scripting vulnerability in DedeCMS V5.7 SP2 official system "Topic Management".
Weaving dream content management system DedeCms is a PHP open source website management system. A cross-site scripting vulnerability exists in the "Topic Management" section of DedeCMS V5.7 SP2. Attackers can insert malicious js code in the page to obtain user cookies and other information,...
ProcessMaker Plugin Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ProcessMaker Plugin Upload', 'Description' = %q This module will generate and upload a plugin to ProcessMaker resulting in execution of PHP code a...
All Aliases Have Failed
Challenge A Tenant's Backup Job or Backup Copy Job targeting a Cloud Repository fails with the following message: Target gate has rejected connection. Unable to establish target connection. All aliases have failed. The wording of the error might differ, but the root error "All Aliases Have Failed...
curriculomais.educacao.sp.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-583779 Description| Value ---|--- Affected Website:| curriculomais.educacao.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....
Arbitrary File Editing Vulnerability in KingCMS v6.1.1641_Sp2
KingCMS is a content management system based on WEB technology. KingCMS v6.1.1641Sp2 has an arbitrary file editing vulnerability. The vulnerability stems from not filtering the path of the file to be modified and the content of the file to be written, which can be exploited by an attacker to edit...
DFARS 7012 Compliance
At Coalfire, we field a lot of questions from government contractors about compliance with National Institute of Science and Technology NIST Special Publication SP 800-171. We also address requests for help with "DFARS 7012," which is a commonly used shorthand for Defense Acquisition Regulation...
FreeBSD : shibboleth-sp -- vulnerable to forged user attribute data (22438240-1bd0-11e8-a2ec-6cc21735f730)
Shibboleth consortium reports : Shibboleth SP software vulnerable to additional data forgery flaws The XML processing performed by the Service Provider software has been found to be vulnerable to new flaws similar in nature to the one addressed in an advisory last month. These bugs involve the us...
NIST SP 800-171: What U.S. Government Contractors Need to Know
In December 2016, NIST released Special Publication 800-171, Revision 1: Protecting Controlled Unclassified Information in Nonfederal Systems. Since that publication, I have worked with dozens of government contractors to help them understand this publication and determine if and how it applies t...
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4076492)
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4076492 Notice This update has been released as part of the Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 f...
Update to add SHA-2 code signing support for Windows Server 2008 SP2
Update to add SHA-2 code signing support for Windows Server 2008 SP2 Summary This update provides support for the Secure Hash Algorithm-2 SHA-2 code signing and verification functionality in the 64-bit version of Windows Server 2008 Service Pack 2 SP2 which includes the following: Support for...
MC RSA Authentication Manager Security Console SQL Injection Vulnerability
EMC RSA Authentication Manager is a centralized binary authentication software from EMC. The software allows centralized management of binary authentication, security tokens, methods, and users across physical sites.Security Console is one of the security console programs. A SQL injection...
FreeBSD : shibboleth-sp -- vulnerable to forged user attribute data (3dbe9492-f7b8-11e7-a12d-6cc21735f730)
Shibboleth consortium reports : Shibboleth SP software vulnerable to forged user attribute data The Service Provider software relies on a generic XML parser to process SAML responses and there are limitations in older versions of the parser that make it impossible to fully disable Document Type...
Code execution vulnerability in DedeCMS V5.7 SP2 (CNVD-2018-01221)
Weaving dream content management system DedeCms is a PHP open source website management system. DedeCMS V5.7 SP2 version of the tpl.php there is a code execution vulnerability, an attacker can use the vulnerability in the addition of new tags to upload a Trojan horse, get webshell...
Joomla SP Movie Database 1.4 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SP Movie Database - SQL Injection Vulnerability Google Dork: inurl:option=comspmoviedb Date: 29.12.2017 Author: pwny Source Component : https://extensions.joomla.org/extension/sp-movie-database/ Version : 1.4 Tested on: Kali Lin...
Joomla SP Movie Database 1.4 SQL Injection
Exploit Title: SP Movie Database - SQL Injection Vulnerability Google Dork: inurl:option=comspmoviedb Date: 29.12.2017 Author: pwny Source Component : https://extensions.joomla.org/extension/sp-movie-database/ Version : 1.4 Tested on: Kali Linux proof : https://ibb.co/cjdiZw Search Form in Home...
Bus Booking Script SQL Injection Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script. A remote attacker can obtain sensitive data e.g., current database user, mysql user by sending the 'spid' parameter to the admin/viewseatseller.php fil...
