It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.
Published at: July 16, 2018 at 03:29PM
View on website
Published at: July 16, 2018 at 03:29PM
View on website
The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml.
Published at: July 18, 2018 at 04:29PM
View on website
Published at: July 18, 2018 at 04:29PM
View on website
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.
Published at: July 16, 2018 at 10:29PM
View on website
Published at: July 16, 2018 at 10:29PM
View on website
Venmo users: time to hide your drug deals and excessive pizza consumption
Read More
Read More
Trends in malware – ransomware, cryptojacking, what next? [PODCAST]
Read More
Read More
Privacy Advocates Say Kelsey Smith Act Gives Police Too Much Power
Read more
Read more
[webapps] WordPress Plugin All In One Favicon 4.6 - Cross-Site Scripting
Read More
Read More
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
Published at: July 19, 2018 at 03:29PM
View on website
Published at: July 19, 2018 at 03:29PM
View on website
[local] Linux - BPF Sign Extension Local Privilege Escalation (Metasploit)
Read More
Read More
Beyond Passwords: Why Your Company Should Rethink Authentication
Read More
Read More
GangWang GPS Navigation Attack Leads Unsuspecting Drivers Astray
Read more
Read more
The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org.
Published at: July 19, 2018 at 07:29PM
View on website
Published at: July 19, 2018 at 07:29PM
View on website