Security update for enigmail (moderate)

This update for enigmail to version 2.0.5 fixes the following issues: Improvements on previous fixes on CVE-2017-17688, boo1093151 and CVE-2017-17689, boo1093152 EFAIL: - do not decrypt MIME parts unnecessarily - improve Error Message for Missing Message Modification Code...

PT-2018-11354

Name of the Vulnerable Software and Affected Versions Spring Data Commons versions 1.13 to 1.13.10 Spring Data Commons versions 2.0 to 2.0.5 Spring Data Commons older unsupported versions Description The issue is caused by unlimited resource allocation due to a property path parser vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 2.0.5-alt1

Feb. 5, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 2.0.5-alt1

Feb. 5, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786...

CVE-2017-17776

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17778

Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...

PHP Scripts Mall Paid To Read Script SQL Injection Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can inject SQL into the Paid To Read Script 2.0.5 by sending the 'uid' parameter t...

Paid To Read Script 'id' Parameter SQL Injection Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the referrals.php...

Paid To Read Script Full Path Disclosure Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. An information disclosure vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. The vulnerability can be exploited to obtain information e.g. absolute paths by accessing ...

Paid To Read Script Authentication Bypass Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A security vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. An attacker can exploit the vulnerability by sending a direct request to bypass authentication and access...

PHP Scripts Mall Basic Job Site Script SQL Injection Vulnerability

PHP Scripts Mall Basic Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features such as job management, profile management and email notification. A SQL injection vulnerability exists in PHP Scripts Mall Basic Job Site Script version 2.0.5. A remote...

Website Auction Marketplace SQL Injection Vulnerability

Website Auction Marketplace is a software for creating e-commerce websites. A SQL injection vulnerability exists in Website Auction Marketplace version 2.0.5. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'catid' parameter to the search.php file...

CVE-2017-17592

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

Website Auction Marketplace 2.0.5 SQL Injection

Exploit Title: Website Auction Marketplace 2.0.5 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://flippa-clone.com/ Software Link: https://flippa-clone.com/ Demo: https://demo.flippa-clone.com/ Version: 2.0.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

Website Auction Marketplace 2.0.5 - cat_id SQL Injection

Website Auction Marketplace 2.0.5 - catid SQL Injection Exploit Title: Website Auction Marketplace 2.0.5 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://flippa-clone.com/ Software Link: https://flippa-clone.com/ Demo: https://demo.flippa-clone.com/ Version: 2.0.5 Category:...

Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection

Exploit Title: Website Auction Marketplace 2.0.5 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://flippa-clone.com/ Software Link: https://flippa-clone.com/ Demo: https://demo.flippa-clone.com/ Version: 2.0.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

MLM Membership Plan Script 2.0.5 - SQL Injection

MLM Membership Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Membership Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-membership-plan-script/ Demo:...

MLM Binary Plan Script 2.0.5 - SQL Injection

MLM Binary Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Binary Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-binary-plan-script/ Demo: http://74.124.215.220/binamlm/...

ALPINE-CVE-2016-6511

epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service OpenFlow dissector large loop via a crafted packet...

Joomla Komento Cross Site Scripting

CVE Reference: CVE-2015-7324 Original advisory: https://www.davidsopas.com/komento-joomla-component-persistent-xss/ Author: David Sopas @dsopas Komento is a Joomla! comment extension for articles and blogs in K2, EasyBlog, ZOO, Flexicontent, VirtueMart and redShop. @http://stackideas.com/komento ...