Subscription Synchronization Does Not Work Among Multiple StoreFront Clusters

Subscription Synchronization does not work among multiple StoreFront clusters...

Video Subscription - SQL Injection

Video Subscription - SQL Injection Exploit Title: TV - Video Subscription - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/tv-video-subscription/13966427 Demo: http://codepaul.com/tv/ Version: N/A Tested on: Win7 x64...

Video Subscription - SQL Injection

Exploit Title: TV - Video Subscription - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/tv-video-subscription/13966427 Demo: http://codepaul.com/tv/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...

MC Coming Soon Arbitrary File Upload Vulnerability

MC Coming Soon is a PHP managed notification subscription script. MC Coming Soon suffers from an arbitrary file upload vulnerability. An attacker can exploit the vulnerability to upload malicious files to gain server privileges...

MS14-017: Description of the Microsoft Office for Mac 2011 14.4.1 Update: April 8, 2014

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted...

Description of Update Rollup 2 for System Center 2012 R2 Service Provider Foundation

Description of Update Rollup 2 for System Center 2012 R2 Service Provider Foundation Summary This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Service Provider Foundation SPF. Additionally, this article contains the installation instructions f...

GitLab: User with guest access can access private merge requests

Vulnerability details A guest user to a private group, cannot access a project's merge requests. However, through the subscription API, an attacker can unsubscribe itself to a merge request, revealing private information that shouldn't be accessible. Impact Merge request might contain private...

CVE-2016-4455

It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack...

subscribe.ajc.com XSS vulnerability

Vulnerable URL: https://subscribe.ajc.com/subscriptionpanel?pid='"--...

StoreFront Upgrade Fails with Large Subscription Database

Note: This issue is not found in Storefront 3.11 and later versions. StoreFront upgrade fails with large subscription database. C:\Windows\Temp\StoreFront\CitrixMSI-CitrixStoreFront log points to following error: An error occurredcreating the snapshot: 'System.IO.IOException: The file is too long...

bvdw.org XSS vulnerability

Vulnerable URL: http://www.bvdw.org/anbieter/profil/adition-technologies-ag?company=1566" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 225395 VIP websit...

CentOS 7 : python-rhsm / subscription-manager (CESA-2016:2592)

An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

python, subscription security update

CentOS Errata and Security Advisory CESA-2016:2592 An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabili...

key.leawo.com XSS vulnerability

Vulnerable URL: http://key.leawo.com/plugin.php?special=benchmarkemail=subscription=prompt/OPENBUGBOUNTY/...

RedHat Update for subscription-manager RHSA-2016:2592-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : subscription-manager (RHSA-2016:2592)

An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

subscription-manager: sensitive world readable files in /var/lib/rhsm/

It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack...

PT-2017-8492 · Red Hat +1 · Subscription-Manager +2

Name of the Vulnerable Software and Affected Versions: Subscription Manager versions prior to 1.17.7-1 Description: The issue concerns weak permissions set for cache directories in the Subscription Manager package, allowing local users to access sensitive information by reading files in these...

Candlepin 'subscription-manager' Insecure File Permissions Vulnerability

Candlepin is a collection of subscription tools that allow companies to manage their software. An insecure file permission vulnerability exists in Candlepin 'subscription-manager'. A local attacker could gain access to world-readable files and extract sensitive information from them...

iSpy Keylogger Targets Passwords, Skype, Webcams

Researchers are monitoring sales and infection rates of a new keylogger being sold on the dark web for $25 to $35. Along with capturing keystrokes, iSpy grabs passwords stored in web browsers, records Skype chats, takes webcam screenshots and steals the license keys of software such as Adobe...