15676 matches found
Velocity Template Injection in Custom user macros - Macros Platform - CVE-2020-4027
Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. This issue was discovered and reported by GHSL team member...
Velocity Template Injection in Custom user macros - Macros Platform - CVE-2020-4027
Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. This issue was discovered and reported by GHSL team member...
team-time.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180229 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
How to Create a Culture of Kick-Ass DevSecOps Engineers
Much like technology itself, the tools, techniques, and optimum processes for developing code evolve quickly. We humans have an insatiable need for more software, more features, more functionality… and we want it faster than ever before, more qualitative, and on top of that: Secure. With an...
keystone:fuzz_asm_mips64be: Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi
Detailed Report: https://oss-fuzz.com/testcase?key=5663481503416320 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmmips64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: MipsAsmParser::isPicAndNotNxxAbi...
Nishang - Offensive PowerShell For Red Team, Penetration Testing And Offensive Security
Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By nikhilmitt Usage Import all the scripts in the current PowerShell session...
File Upload Vulnerability in Team CMS
Team CMS website is a jsp + mysql for the development of jsp enterprise building system. Team CMS has a file upload vulnerability that can be exploited by attackers to gain server administrative privileges...
HackerOne: GraphQL field on Team node can be used to determine if External Program runs invite-only program
On 19th May, A new parameter policymarkdownhtml been introduced inside the team Graphql query. Using Graphql query, We can able to determine External program running privately on Hackerone as policymarkdownhtml parameter was able to fetch private internal policy. Note: Using this parameter, it wa...
Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
Cross-site scripting vulnerabilities in Team Members version 5.0.3 and lower allow medium-privileged authenticated attacker contributor+ to inject arbitrary web script or HTML via the 'Description/biography' of a member. PoC https://drive.google.com/file/d/1w5AmyBEOxAmtQ0T3uGKAB3o9w3ihNRAj/view A...
Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
Cross-site scripting vulnerabilities in Team Members version 5.0.3 and lower allow medium-privileged authenticated attacker contributor+ to inject arbitrary web script or HTML via the 'Description/biography' of a member. https://drive.google.com/file/d/1w5AmyBEOxAmtQ0T3uGKAB3o9w3ihNRAj/view Add a...
WordPress Team Members plugin <= 5.0.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Tuan in WordPress Team Members plugin versions = 5.0.3. Solution Update the WordPress Team Members plugin to the latest available version at least 5.0.4...
Security Bulletin: Multiple security vulnerabilities in IBM® Java SDK Oct 2019 and Jan 2020 CPU have been identified in Jazz Team Server shipped with Jazz Reporting Service
Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilitiesin IBM® Java SDK Oct 2019 and Jan 2020 CPU affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details Refer...
Security Bulletin: Vulnerabilities in WebSphere Application Server affects IBM Rational Products based on IBM Jazz technology
Summary There are vulnerabilities in IBM WebSphere Application Server Liberty Admin Center bundled with IBM Jazz Team Server based Applications that affect the following products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager...
Easy Testimonials < 3.6 - Authenticated Stored Cross-Site Scripting (XSS)
Multiple cross-site scripting vulnerabilities in Easy Testimonials 3.5.2 and lower allow remote attackers to inject arbitrary web script or HTML via the Client Name, Position / Web Address / Other, Location Reviewed / Product Reviewed / Item Reviewed, Rating parameter. Successful exploitation of...
Analyzing Dark Crystal RAT, a C# Backdoor
The FireEye Mandiant Threat Intelligence Team helps protect our customers by tracking cyber attackers and the malware they use. The FLARE Team helps augment our threat intelligence by reverse engineering malware samples. Recently, FLARE worked on a new C variant of Dark Crystal RAT DCRat that the...
How to gain 24/7 detection and response coverage with Microsoft Defender ATP
This blog post is part of the Microsoft Intelligence Security Association guest blog series. To learn more about MISA, go...
Nuls Public Chain Transaction Signature Verification Vulnerability
A vulnerability in Nuls' transaction signature verification algorithm allowed an attacker to bypass signature verification using carefully constructed transactions, transferring tokens from the team's account, with some of the tokens subsequently dumped into the market...
Download: 'Coronavirus Cyber Security for Management' Template for CISOs
The Coronavirus crisis introduces critical operational challenges to business continuity, placing high stress on organizations' management. As a result, CIOs and CISOs face a double challenge on the cyber risk front – apart from the new risks that the mass transfer of employees working remotely...
Open-Xchange: Pre-auth Denial-of-Service in Dovecot RPA implementation
Hi, Dovecot security team. I am Orange from DEVCORE security team. We just did a little security audit on the authentication mechanism of Dovecot, and found a buffer over-read in RPA implementation. In the mech-rpa.c, the function rpareadbuffer doesn't check that the length could be zero, and pas...
Open-Xchange: Pre-auth buffer over-read in Dovecot NTLM implementation
Hi, Dovecot security team. I am Orange from DEVCORE security team. We just did a little security audit on the authentication mechanism of Dovecot, and found a buffer over-read in NTLM implementation. The structure of NTLM field is defined in ntlm-types.h c struct ntlmsspbuffer uint16t length; /...