CVE-2019-1076

CVE-2019-1076 is a Cross-site Scripting (XSS) vulnerability affecting Microsoft Team Foundation Server and Azure DevOps Server. The issue arises when input is not properly sanitized, allowing an attacker to execute script in the context of the affected user. Public exploit activity is noted in th...

CVE-2019-1076

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'...

Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (July 2019)

The Microsoft Team Foundation or Azure DevOps Server is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input. An authenticated attacker could...

Microsoft Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-24392)

Microsoft Team Foundation Server and Microsoft Azure DevOps Server are both products of Microsoft Corporation, U.S.A. Microsoft Team Foundation Server is a suite of Application Lifecycle Management ALM tools Microsoft Team Foundation Server is an application lifecycle management ALM suite of tool...

Microsoft Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability

Team Foundation Server is a Microsoft product that provides source code management, reporting, requirements management, project management, automated build, lab management, testing, and release management capabilities. Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locall...

CVE-2019-13380

KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault...

Design/Logic Flaw

KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault...

CVE-2019-13380

CVE-2019-13380 affects KEYNTO Team Password Manager 1.5.0 and is caused by mishandling data saved from websites in the online vault, enabling XSS. The available connected documents confirm the vulnerable component/function is the online vault data handling, with the impact described as cross-site...

CVE-2019-13380

KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault...

Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server TFS improperly handle user input. An attacker who successfully exploited the vulnerability could execute code on the target server in the context of the DevOps or TFS service account. To exploit the...

Microsoft Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability

Description Microsoft Azure DevOps Server and Team Foundation Server are prone to an remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the DevOps or TFS service account. Failed exploit attempts will likely result in denial of...

Microsoft Team Foundation Server CVE-2019-1076 Cross Site Scripting Vulnerability

Description Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

KLA11513 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...

Sahi Pro 8.x File Disclosure

File disclosure vulnerability in Sahi Pro href parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Related vulnerabilities have now been patched: the Orvibo smart home devices disclosure of user information-bug warning-the black bar safety net

From Orvibo aspect to understand, this relates to the information disclosure of the security vulnerability has now been fixed, and the user information of the protection level, at the same time they also want and professional information security research team into cooperation with the protection...

Synology Moments Path Traversal Vulnerability

Synology Moments is an image and video categorization management application from Synology, a Taiwan-based company. The program is able to recognize people, subjects and locations in photos and automatically categorize them through image recognition technology. A path traversal vulnerability exis...

Enhancing Customer Value, Building Customer Relationships and Strengthening Team Collaboration

Effective communication skills are fundamental to developing both immediate and long term relationships with our customers. How else can we learn the answers to questions such as: "What are our customers concerns, needs, and desires?", "How can we best address their short and long term needs?", A...

CVE-2018-6142

Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

Ultimate Member < 2.0.52 - CSRF and Stored XSS issues

A CSRF vulnerability in adding/editing user roles in Ultimate Member 2.0.49. It also lead to stored XSS. Edit WPScanTeam: July 9th, 2019 - v2.0.50 released and still affected. Escalated to WP Plugins Team July 9th, 2019 - v2.0.51 released, fixing the CSRF but not the XSS July 11th, 2019 - Escalat...

Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0221)

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about a security vulnerability affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-0221 DESCRIPTION: Apache Tomcat is...