82 matches found
CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity
I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...
Women in Tech and Career Spotlight: Shu White
Up next in our series featuring women in technology at Imperva is a spotlight on Shu White, the company’s vice president and deputy general counsel. Hailing from a legal background, I found her perspective particularly unique. Read below for Shu’s take on the cybersecurity industry, the inspiring...
CVE-2017-14839
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover...
CVE-2017-14838
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
Default credentials
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover...
Default credentials
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
Design/Logic Flaw
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
TeamWork Job Links profileChange and coverChange arbitrary file upload vulnerability (CNVD-2017-33670)
TeamWork Photo Fusion is a web-based photo management system that allows users to upload photos or view other users' photos. changeAvatar and changeCover are both functional modules. changeAvatar is a module for changing a user's avatar. changeCover is a module for changing a cover. changeAvatar ...
TeamWork Job Links profileChange and coverChange Arbitrary File Upload Vulnerability
TeamWork Job Links is a recruitment management system. profileChange and coverChange are both functional modules. profileChange is a profile change module. coverChange is a cover change module. An arbitrary file upload vulnerability exists in profileChange and coverChange in TeamWork Job Links. A...
TeamWork TicketPlus updateProfile Arbitrary File Upload Vulnerability
TeamWork TicketPlus is a ticket management system based on PHP and MySQL. updateProfile is one of the update files. An arbitrary file upload vulnerability exists in updateProfile in TeamWork TicketPlus. A remote attacker can exploit this vulnerability to upload arbitrary files...
CVE-2017-14838
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
CVE-2017-14839
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover...
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
CVE-2017-14839
CVE-2017-14839 affects TeamWork Photo Fusion. Connected records corroborate an arbitrary file upload vulnerability in the changeAvatar and changeCover functionality. The core issue is the ability to upload files without proper restriction in these modules, enabling potential impact as described a...
CVE-2017-14840
CVE-2017-14840 affects TeamWork TicketPlus. A vulnerability in updateProfile allows Arbitrary File Upload, enabling an attacker to upload arbitrary files via the updateProfile function. Documented impact from CVSSv3 indicates high severity (Impact: Confidentiality, Integrity, Availability all Hig...
CVE-2017-14838
TeamWork Job Links is vulnerable to an arbitrary file upload in the profileChange and coverChange modules. The root cause is an improper validation/handling of uploaded files, allowing a remote attacker to upload arbitrary files. Impact noted in sources includes the ability to upload files remote...
Visual Paradigm Server 10.0 Cross Site Scripting Vulnerability
Visual Paradigm Server version 10.0 suffers from a cross site scripting vulnerability. ================================================================ Visual Paradigm Server v10.0 - Cross Site Scripting XSS ================================================================ Information...
Microsoft Office Groove Insecure Library Loading
Added: 03/28/2011 CVE: CVE-2010-3146 BID: 42695 OSVDB: 67484 Background Microsoft Office Groove is a collaboration-based software application that allows teams and organizations to work together regardless of physical or network location. Problem Microsoft Office Groove has a vulnerability due to...