Storefront upgrade failing

-In the event viewer windows application logs we get "\CitrixStoreFront-x64.msi failed with error code 1603" -And in CitrixDeliveryServices logs we get " error in retrieving synchronization information " -Checked logs on SF and see that it was unable to stop "Citrix Subscription Store" service...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.2 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

online.email.subscription.centre.1sl-applstore.com XSS vulnerability

Vulnerable URL: http://online.email.subscription.centre.1sl-applstore.com/secure/index.php?em=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

your4state.com XSS vulnerability

Vulnerable URL: http://www.your4state.com/search?ppid=searchresultWARsitesearchportletplifecycle=1pstate=normal&searchresultWARsitesearchportletjavax.portlet.action=search=rrrrrrr%22%20onfocus=prompt%22OPENBUGBOUNTY%22%20autofocus%20x=%22=0=0 Details: Description| Value ---|--- Patched:| Yes, at...

How to Export and Import StoreFront Subscription Database on StoreFront 3.6

This article explains how to export and import a StoreFront subscription database on Storefront 3.6. Background The previous versions of StoreFront had different commands to export and import a StoreFront subscription database. The previous commands are now obsolete. The following is the previous...

WordPress ALO EasyMail Newsletter Plugin Cross-Site Request Forgery Vulnerability

The ALO EasyMail Newsletter plugin provides list management results, and it is necessary to read emails from the mail server, so this plugin also stores the login information of the mail server explicitly in the WordPress database. The WordPress Plugin ALO EasyMail Newsletter suffers from a...

Multiple vulnerabilities in TYPO3 Ajax mail subscription extension

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Ajax mail subscription is one of the plugins to add a subscription to an email newsletter. Authentication bypass vulnerabilities and security bypass vulnerabilities exist...

TYPO3 MMC directmail subscription extension information disclosure vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.MMC directmail subscription is one of the email subscription extension plug-ins. An information disclosure vulnerability exists in TYPO3 MMC directmail subscription...

Fedora 23 : 2:docker (2016-6a0d540088)

built docker @projectatomic/fedora-1.10.3 commit f476348 ---- built docker @projectatomic/fedora-1.10.3 commit f476348 ---- built docker @projectatomic/fedora-1.10.3 commit 4158ccc ---- Resolves: 1335649 - enable Red Hat subscription use in Docker containers on Fedora ---- built docker...

Fedora 24 : 2:docker (2016-6ef52e1fc3)

Resolves: 1340519 - add TasksMax=infinity ---- built docker @projectatomic/fedora-1.10.3 commit f476348 ---- built docker @projectatomic/fedora-1.10.3 commit f476348 ---- built docker @projectatomic/fedora-1.10.3 commit 4158ccc ---- Resolves: 1335649 - enable Red Hat subscription use in Docker...

OLX: Manipulating joinolx.com Job Vacancy alert subscription emails (HTML Injection / Script Injection)

Hello, Another report here. Description I found that www.joinolx.com has an option to do subscription for vacancy alert. So I took a look at that. I was able to include my HTML codes to manipulate emails sent to my address. The Name field in the subscription form doesn't validate the name to stri...

magendavidsynagogue.com XSS vulnerability

Vulnerable URL: http://www.magendavidsynagogue.com/payment.php?notes=%3C/stYle/%3C/titLe/%3C/teXtarEa/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

netdesignbook.com XSS vulnerability

Vulnerable URL: http://www.netdesignbook.com/CT0-Category-Product all-1-OPENBUGBOUNTY.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6241469 VIP website status:| No Check...

OracleVM 3.2 : sos (OVMSA-2016-0078)

The remote OracleVM system is missing necessary patches to address critical security updates : - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile - Strip passwords from grub.conf and...

buycheap2day.com XSS vulnerability

Vulnerable URL: http://www.buycheap2day.com/gk/?query=OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 09.04.2017 Latest check for patch:| 09.04.2017 07:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2863670 VIP website status:| No Check...

Information Disclosure in "MMC directmail subscription" (mmc_directmail_subscription)

It has been discovered that the extension "MMC directmail subscription" mmcdirectmailsubscription is susceptible to Information Disclosure. Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 0.9.6 an...

CVE-2016-2154

admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule...

Uber: Missing authentication on Notification setting .

Hi , Notification setting link works without cookies so an attacker can steal link from browser histroy and can change notification setting of victim. Notification setting link does not expire even after logout. Steps to reproduce :- 1.Log in as uber rider. 2.Go to profile. 3.Now go to "Manage yo...

Uber: Defect-Security | Driver-Broken Authentication | Able to update the Subscription Setting anonymously

Steps to execute the issue/defect 1:Logged into account on domain https://riders.uber.com with one of the accounts account type-Driver 2:Now go to Manage your email subscription settings and note the link mentioned below -View the subscription setting i.e. subscription setting Uber Global Updates...

Automattic: Akismet Several CSRF vulnerabilities

Summary ----------- Akismet is vulnerable to CSRF allowing an attacker to cancel accounts of victims, add sites, remove subscriptions, etc. Steps to reproduce Account cancelation ----------- 1. Login to your Akismet account, which has a subscription activated. 2. The following POST request will...