Directory traversal

Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecified vectors...

CVE-2018-0646

CVE-2018-0646 affects Explzh up to v7.58 with a directory traversal vulnerability (CWE-22). Exploitation allows reading arbitrary files via absolute path traversal during extraction, as described in JVN/JVNDB sources. Affected product: Explzh v.7.58 and earlier. Root cause: directory traversal du...

CVE-2018-0646

Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecified vectors...

SeaCMS cross-site scripting vulnerability (CNVD-2018-19071)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminvideo.php file in SeaCMS version 6.61, which can be exploited by remote attackers to...

Command Execution Vulnerability in Multiple Series of FUJI XEROX Printer Products

FUJI XEROX ApeosPort-V 5070, FUJI XEROX ApeosPort-V C3375, etc. are printer products introduced by Fuji Xerox. A command execution vulnerability exists in multiple series of FUJI XEROX printer products. An attacker can exploit the vulnerability to execute commands, upload files, delete printer...

Release Notes for Veeam Management Pack 8.0 Update 6

Challenge Release Notes for Veeam Management Pack 8.0 Update 6. NOTE : The Veeam Management Pack 8.0 Update 6 cumulative patches for Veeam Backup & Replication monitoring and VMware vSphere 7.0 monitoring are available through kb2940 and kb3172 correspondingly. Cause Please confirm you are runnin...

Backing Up Hyper-V Guest Cluster Based on VHD Set

Challenge VHD Set is a new shared Virtual Disk model for guest clusters in Windows Server 2016 and later. VHD Set files can be included in application-consistent checkpoints and backed up, but there are some limitations. Cause Please make sure the following requirements are met: Each guest VM...

bud-v-forme.ru XSS vulnerability

Open Bug Bounty ID: OBB-662970 Description| Value ---|--- Affected Website:| bud-v-forme.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 28 Update: cups-2.2.6-16.fc28

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple In c. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Fortnite Scammers Approaching $1m in Annual Takings

When something seems too good to be true, it probably is. It’s a hard lesson to learn and, in this case, one that’s being taught by scammers. The perpetrators are abusing the fact that online players of Battle Royale games may be very eager to get free in-game currency and items, and are willing ...

Design/Logic Flaw

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs...

CVE-2018-14442

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs...

CVE-2018-14442

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free vulnerability that leads to Remote Code Execution. The connected documents consistently identify a memory misreference/UAF as the root cause and confirm impact as RCE. No exploit details or in-the-wild status are provided. Re...

CVE-2016-6551

Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device...

CVE-2016-6551

CVE-2016-6551 affects Intellian Satellite TV antennas (t-Series and v-Series) with firmware version 1.07. The issue is use of non-random default credentials (ftp/ftp or intellian:12345678) that allow a remote network attacker to gain elevated access to a vulnerable device. Public sources (NVD) ci...

Threat Outbreak Alert RuleID33103: Email Messages Distributing Malicious Software on July 4, 2018

Medium Alert ID: 58356 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33103 may contain the following files: Name | Size...

Beware! Fortnite Cheat Hijacks Gamers' PCs to Intercept HTTPS Traffic

If you are looking for Fortnite v-bucks generator, aimbot or any other game cheats—then beware—you might end up installing malware on your PC! Web-based game-streaming platform Rainway is reporting that tens of thousands of Fortnite players have inadvertently infected their systems with a piece o...

Release Notes for Veeam Backup & Replication 9.5 Update 3a

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup Replication 9.5 Update 3a Cause Please confirm that you are running version 9.5.0.580, 9.5.0.711, 9.5.0.802, 9.5.0.823,...

Cross site scripting

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for Hyper-V

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ that is used by IBM Spectrum Protect formerly Tivoli Storage Manager for Virtual Environments: Data Protection for Hyper-V. These issues were disclosed as part of the IBM Java SDK updates in October 2017 and January 2018...