WordPress Movies Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Movies is a movie and video library management plugin used in it. A cross-site scripting vulnerability exists in WordPress Movies 0.6 a...

CVE-2019-6012

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Waitress Environmental Vulnerability (CNVD-2020-01313)

Waitress is a WSGI Web Server Gateway Interface server for Python. An environmental issue vulnerability exists in Waitress 1.3.1 and earlier versions. The vulnerability stems from an unreasonable environmental factor in a networked system or product. No detailed vulnerability details are provided...

UBUNTU-CVE-2019-17571

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1...

CVE-2019-17571

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1...

Arbitrary File Deletion Vulnerability in Yunyou City Substation System

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YunYu city substation system Up.php file exists arbitrary file deletion vulnerability. Attackers can modify the parameters to delete arbitrary files...

CVE-2019-5251

There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information...

All in the (Ransomware) Family: 10 Ways to Take Action

In a world where everything is an “as-a-service,” it’s no surprise that ransomware-as-a-service RaaS is a hot ticket on the Dark Web. FortiGuard Labs has observed at least two significant ransomware families – Sodinokibi and Nemty – now being deployed as RaaS solutions. Meanwhile, cybercriminals...

SUSE-SU-2019:3263-1 Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92120 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship...

SUSE-SU-2019:3255-1 Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-9532 fixes several issues. The following security issue was fixed: - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists bsc1153108. The following bugs were fixed: - Fixed boot up hang revealed by int3 se...

SUSE-SU-2019:3228-1 Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94100 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

How to Remove Client Files Remaining on System after Uninstalling Receiver for Windows

This article is intended for Citrix administrators and technical teams only. NOTE: Receiver for Windows version 4.4 or later does not require these manual steps. Receiver for Windows 4.4 and later no longer requires separate Clean-Up Utility before installing or upgrading over a previously...

Code injection

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

The vulnerability of the ROUND_UP(n, d) component of the QEMU hardware emulator allows a hacker to trigger a service failure.

The vulnerability of the ROUNDUPn, d component of the QEMU hardware emulator is caused by integer overflow. Exploiting this vulnerability can allow an attacker to cause a system failure...

Brave Browser - Next Generation Secure, Fast And Private Web Browser with Adblocker

The Brave Privacy Browser is your fast, safe private web browser with ad blocker, private tabs and pop-up blocker. Browse without being tracked by advertisers, malware and pop-ups. Fast & Secure Web Browser No external plugins or settings! Brave privacy browser simply provides the most secure,...

Krakow's Commitment to a Sustainable Office and Community

Written by Courtney Hadden, Corporate Sustainability, and Karolina Galeziowska, Krakow Sustainability Team Lead As an essential part of the Internet for over 20 years, Akamai believes it is our responsibility to help create digital experiences that are fast, intelligent and secure, while caring f...

CVE-2019-8211

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

make-up-artist-show.de Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6846 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting make-up-artist-show.de website and its users. Following...

Gila CMS Upload Over Bypass Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in Gila CMS 1.11.4 and earlier versions. The vulnerability can be exploited to upload malicious files and execute code with the help of the 'moveAction' function in the...

Arbitrary file deletion vulnerability in zzcms up***_no***.php page

Merchants content management system referred to as zzcms, developed by the zzcms team, into the database optimization, content caching, ajax and other technologies, so that the site's security, stability, load capacity to get a reliable guarantee. zzcms upno.php page there are arbitrary file...