[SECURITY] Fedora 27 Update: php-phpmyadmin-sql-parser-4.2.4-3.fc27

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

Girls Who Code: That's a Wrap!

The Summer Immersion Program for Girls Who Code at Akamai wrapped up this past week. The girls finished their final projects and presented them at a graduation ceremony attended by friends and family as well as supporters and mentors from Akamai. The girls were divided into five teams for their...

Girls Who Code Summer Immersion Program - Week One

Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...

theetiquettefactory.com XSS vulnerability

Open Bug Bounty ID: OBB-244133 Description| Value ---|--- Affected Website:| theetiquettefactory.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Metasploit Weekly Wrapup

Ghost...what??? hdm recently provided a new exploit module for a type confusion vulnerability that exists in Ghostscript versions 9.21 and earlier, allowing remote code execution on the target. And to "kick it up a notch", this exploit got itself a snazzy logo which also contains the exploit:...

Summer Baby Zoom Wifi Monitor & Internet Viewing System Elevation of Privilege Vulnerability

Summer Baby Zoom Wifi Monitor and Internet Viewing System is a wireless internet monitoring video system. An elevation of privilege vulnerability exists in the Summer Baby Zoom Wifi Monitor&Internet Viewing System. An attacker can exploit this vulnerability to gain privileges...

Summer Baby Zoom Wifi Monitor & Internet Viewing System Authentication Bypass Vulnerability

Summer Baby Zoom Wifi Monitor and Internet Viewing System is a wireless internet monitoring video system. A security vulnerability exists in the Summer Baby Zoom Wifi Monitor&Internet Viewing System. A remote attacker could exploit this vulnerability to bypass authentication...

CVE-2015-2889

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a Settings URL...

Authentication flaw

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

CVE-2015-2889

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a Settings URL...

CVE-2015-2888

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

CVE-2015-2889

The Summer Baby Zoom Wifi Monitor & Internet Viewing System is affected by CVE-2015-2889, which allows remote attackers to gain privileges through manual entry of a Settings URL. Publicly available details describe an elevation of privilege vulnerability that can be exploited over a network witho...

CVE-2015-2888

The CVE-2015-2888 entry concerns the Summer Baby Zoom Wifi Monitor & Internet Viewing System. Affected component/issue is authentication bypass related to the MySnapCam web service, enabling remote attackers to bypass authentication over the network. CVSS data in the document shows a high/severe ...

WordPress Global Content Blocks 2.1.5 Cross Site Request Forgery

------------------------------------------------------------------------ Cross-Site Request Forgery in Global Content Blocks WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress NewStatPress 1.2.4 Cross Site Scripting

------------------------------------------------------------------------ Persistent Cross-Site Scripting in the WordPress NewStatPress plugin ------------------------------------------------------------------------ Han Sahin, July 2016...

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery !-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This...

WordPress Plugin NewStatPress 1.2.4 - Cross-Site Scripting

WordPress Plugin NewStatPress 1.2.4 - Cross-Site Scripting Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptinginthewordpressnewstatpressplugin.html Abstract A persistent Cross-Site Scripting XSS vulnerability has been found in the WordPress NewStatPress plugin. By using this...

WordPress File Manager 3.0.1 Plugin - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgeryinfilemanagerwordpressplugin.html Abstract A Cross-Site Request Forgery CSRF vulnerability was found in the File Manager WordPress Plugin. Among others, this issue can be use...

WordPress Google Forms Plugin unauthenticated PHP Object injection vulnerability

Exploit for php platform in category web applications Abstract A PHP Object injection vulnerability was found in the Google Forms WordPress Plugin, which can be used by an unauthenticated user to instantiate arbitrary PHP Objects. Using this vulnerability it is possible to execute arbitrary PHP...

WordPress Google Analytics Counter Tracker 3.1.5 PHP Object Injection

------------------------------------------------------------------------ Google Analytics Counter Tracker WordPress Plugin unauthenticed PHP Object injection vulnerability ------------------------------------------------------------------------ Remco Vermeulen, July 2016...