Code injection

Portus 2.2.0 has XSS via the Team field, related to typeahead...

CVE-2017-14621

Portus 2.2.0 has XSS via the Team field, related to typeahead...

CVE-2017-14621

Portus 2.2.0 has XSS via the Team field, related to typeahead...

CVE-2017-14621

Portus 2.2.0 is affected by an XSS vulnerability in the Team field (typeahead). The issue allows injection of arbitrary web script/HTML via the Team field. A remediation exists: SUSE-SU-2017:2655-1 security update for Portus, which fixes CVE-2017-14621. The vulnerability is listed with CVSS v3.0 ...

CVE-2017-14621

Portus 2.2.0 has XSS via the Team field, related to typeahead...

Server memory information leak over SMB1

Description All versions of Samba are vulnerable to a server memory information leak bug over SMB1 if a client can write data to a share. Some SMB1 write requests were not correctly range checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be...

Trend Micro Mobile Security for iOS/Android Proxy.php RCE

Remote command execution vulnerability in Trend Micro Mobile Security for iOS/Android Proxy.php T parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Skype Status - Moderately Critical - Cross Site Scripting - DRUPAL-SA-CONTRIB-2017-076

This module enables you to obtain the status for a user's Skype account The module doesn't sufficiently sanitize the user input for their Skype ID. This vulnerability is mitigated by the fact that an attacker must have an account on the site and be allowed to edit/input their Skype ID. CVE...

Introducing pywintrace: A Python Wrapper for ETW

Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...

HackerOne: Report Private Links Leaks to Google Analytics via Query String Param

Hello HackerOne Team, According to HackerOne privacy HackerOne sometimes partners with third-party services which may use various tracking technologies to provide certain services or features, including targeted online marketing. These technologies allow a partner to recognize your computer or...

openthread: Stack-buffer-overflow in ot::NetworkData::PrefixTlv::GetSubTlvs

Detailed report: https://oss-fuzz.com/testcase?key=5490815742771200 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fb823a8eb22 Crash...

WordPress <=4.8.1 - Cross-Site Scripting (XSS) vulnerability (oEmbed)

Cross-Site Scripting XSS vulnerability found by xknown of the WordPress Security Team in WordPress oEmbed version 4.8.1 and earlier versions. Solution Update the WordPress to the latest available version at least 4.8.2...

DaisyThemes WordPress Easy Team Manager SQL Injection Vulnerability

DaisyThemes WordPress Easy Team Manager is a team management plugin for WordPress developed by DaisyThemes UK. A SQL injection vulnerability exists in DaisyThemes WordPress Easy Team Manager version 1.3.2, which stems from a vulnerability in . /easy-team-manager/inc/easyteammanagerdescedit.php fi...

CVE-2017-1002023

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

CVE-2017-1002023

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

CVE-2017-1002023

The CVE affects the WordPress plugin Easy Team Manager v1.3.2. Root cause: the code in ./easy-team-manager/inc/easy_team_manager_desc_edit.php fails to sanitize the id before using it in an SQL statement, enabling SQL injection. Reports describe it as an authenticated blind SQL injection vulnerab...

how2heap vulnerability technical research and analysis summary of-under-vulnerability warning-the black bar safety net

"how2heap"is shellphish team at Github on the open source stack flaws tutorial series. I this period of time non-stop in the refresher heap of flaws in the application of common sense,to see these applied skills in the future feel rewarding. This article is my training this tutorial series after ...

Schneider Electric Pelco VideoXpert auth_token Cookie Disclosure

Schneider Electric Pelco VideoXpert /portal/ URI path traversal authtoken cookie disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Shopify: stored xss in invited team member via email parameter

Hey there, while testing your program I found a stored XSS vulnerability which can placed by owners or other staff members who have ability to manage members and it will triggered by visiting invited team member page e.g. https://partners.shopify.com/642416/invitations/15406. Reproduction Steps 1...

Grab: Access Grab_Road BigData Database via Open Presto coordinator

A publicly accessible analytics database instance was identified, due to a firewall misconfiguration. The instance contained booking related information but did not contained any passenger or driver personal information. This vulnerability was discovered using Shodan search engine by Vinoth Kumar...