CVE-2017-2603

Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens SECURITY-362...

CVE-2017-2603

Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens SECURITY-362...

CVE-2017-2603

Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens SECURITY-362...

CVE-2017-2603

Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens SECURITY-362...

CVE-2017-2603

CVE-2017-2603 affects Jenkins prior to 2.44 and 2.32.2, where the config.xml API used for disconnected agents can disclose user data. The root cause is a flaw in how the API handles agent disconnects, causing user objects to be included in API output and potentially exposing sensitive information...

SQL Injection Vulnerability in Guangzhou Lianxiang Cms

Guangzhou Lianxiang Information Technology Co., Ltd. is an e-commerce Internet enterprise that specializes in website construction, micro letter development and website development. Guangzhou Lianxiang CMS has a SQL injection vulnerability. Attackers can use the vulnerability to perform malicious...

TBK DVR4104 / DVR4216 Credential Disclosure

-- coding: utf-8 -- import json import requests import argparse import tableprint as tp class Colors: BLUE = '\03394m' GREEN = '\03332m' RED = '\0330;31m' DEFAULT = '\0330m' ORANGE = '\03333m' WHITE = '\03397m' BOLD = '\0331m' BRCOLOUR = '\0331;37;40m' banner = ''' ..--.. ..... .-- ..... . .": "-...

Foxit Reader U3D Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Twitter Urges Users to Change Passwords Due to Glitch

Twitter said Thursday that a glitch caused account passwords to be stored in plain text on an internal log, sending users across the platform scrambling to change their passwords. The social media company said that it found and has fixed the glitch, and its investigation shows no indication of a...

Foxit Reader ConvertToPDF_x86 BMP Parsing Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the ConvertToPDFx86.dll implementation that can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of the length of...

Foxit Reader Heap Buffer Overflow Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in BMP graphics parsing, which can be exploited by an attacker to execute arbitrary code in the context of the current process, due to a lack of proper validation of user-supplied data...

Foxit Reader XFA record remove remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA record remove method, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

Leaking ads

When we use popular apps with good ratings from official app stores we assume they are safe. This is partially true – usually these apps have been developed with security in mind and have been reviewed by the app store's security team. However, we found that because of third-party SDKs many popul...

Multiple Auth0 Library Authentication Bypass Vulnerabilities

Auth0.js is a client-side library for Auth0, and Lock is an embeddable login form for desktops, tablets, and mobile devices. An authentication bypass vulnerability exists in Auth0 Lock 10 and auth0.js 8, which can be exploited by an attacker to log in as an administrator, perform administrative...

Wukong CRM version 0.5.5 suffers from password reset vulnerability

Wukong CRM is a permanent open source and free CRM management system. A password reset vulnerability exists in Wukong CRM version 0.5.5. An attacker can exploit this vulnerability to gain unauthorized access to user information and reset any user's password...

Privacy Advocates Blast Facebook After Data Scraping Scandal

Privacy advocates are up in arms after CEO Mark Zuckerberg said this week a Facebook reverse search tool may have compromised the data of the social network’s two billion users. The feature in question was designed to enable users to enter a Facebook user’s phone numbers or email addresses into t...

Apple Mac OS X Security Updates (HT208692)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3820

Kibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting XSS vulnerability in labs visualizations that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...

Animal abuse website hacked; thousands of users exposed

By Waqas An animal abuse website or otherwise called a "bestiality" platform This is a post from HackRead.com Read the original post: Animal abuse website hacked; thousands of users exposed...

Shijiazhuang Mingquan Network Technology Co., Ltd. Yiyangzhi APP has information leakage vulnerability and ultra vires access vulnerability

Yiyangzhi APP is an application software that combines several services of tuina, massage, foot care, cupping and gua sha launched by Shijiazhuang Mingquan Network Technology Co. Shijiazhuang Mingquan Network Technology Co., Ltd. Yiyangzhi APP suffers from an information leakage vulnerability and...