CVE-2018-7475

Cross-site scripting XSS vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-7475

IceWarp Mail Server 12.0.3 is affected by a cross-site scripting (XSS) vulnerability in the webdav/ticket/ URIs. The issue, described in CVE-2018-7475, allows remote attackers to inject arbitrary web script or HTML. Public references confirm XSS in IceWarp Mail Server

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2016-2125, CVE-2016-2126)

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2016-2125...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server (CVE-2014-3567, CVE-2014-3568)

Summary OpenSSL vulnerabilities along with SSL 3 Fallback protection TLSFALLBACKSCSV were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by IBM InfoSphere Information Server. IBM InfoSphere Information Server have addressed the applicable CVEs and included the SSL 3.0...

OTRS Information Disclosure Vulnerability

OTRS Open-source Ticket Request System is a set of open source defect tracking and management system software from OTRS Group in Germany. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and th...

UBUNTU-CVE-2018-10198

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

DEBIAN-CVE-2018-10198

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

CVE-2018-10198

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

2018 Fraud World Cup

There are only two weeks to go before the start of the massive soccer event — FIFA World Cup. This championship has already attracted the attention of millions worldwide, including a fair few cybercriminals. Long before kick-off, email accounts began bulging with soccer-related spam, and scammers...

Mail.ru: Clickjacking Vulnerability on https://support.my.com/games/ticket/xxxx/

Hi There, I have found a Clickjacking vulnerability on your site. Steps to reproduce: 1.Go to https://support.my.com this site 2.Generate a Clickjacking script, save it as .html and run into your browser Script: iframe width: 800px; height: 500px; position: absolute; top: 0; left: 0; filter:...

WordPress WP Support Plus Responsive Ticket System SQL Injection

SQL Injection vulnerability in WordPress WP Support Plus Responsive Ticket System plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

How do I configure NetScaler Gateway to use a Cloud Connector as a STA

To use Cloud Connectors as the Secure Ticket Authority STA servers...

Adaltech G-Ticket SQL Injection Vulnerability

Adaltech G-Ticket is a ticket validation system. A SQL injection vulnerability exists in Adaltech G-Ticket version 70 EME104. A remote attacker can exploit this vulnerability by sending the 'evecod' parameter to the mobile-loja/mensagem.asp file to execute SQL commands...

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

Sql injection

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

CVE-2018-10284

Affected software: Adaltech G-Ticket v70 EME104. Vulnerable component: mobile-loja/mensagem.asp, parameter eve_cod . Root cause: SQL Injection due to unvalidated input. Impact: enables execution of arbitrary SQL commands (as stated in sources), with high severity in CVSS metrics. Exploitation det...

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

CVE-2018-1000154

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page CWE-80 vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser...