ATENTION‼ New - CVE-2018-17416
📖 Read
via "National Vulnerability Database".
A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-17415
📖 Read
via "National Vulnerability Database".
zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-17414
📖 Read
via "National Vulnerability Database".
zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-17413
📖 Read
via "National Vulnerability Database".
XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-17412
📖 Read
via "National Vulnerability Database".
zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16809
📖 Read
via "National Vulnerability Database".
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16808
📖 Read
via "National Vulnerability Database".
An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16804
📖 Read
via "National Vulnerability Database".
An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14499
📖 Read
via "National Vulnerability Database".
An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14498
📖 Read
via "National Vulnerability Database".
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14038
📖 Read
via "National Vulnerability Database".
The aout_32_swap_std_reloc_out function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils before 2.31, allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file, as demonstrated by objcopy.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14038
📖 Read
via "National Vulnerability Database".
The aout_32_swap_std_reloc_out function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils before 2.31, allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file, as demonstrated by objcopy.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-12447
📖 Read
via "National Vulnerability Database".
GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7468
📖 Read
via "National Vulnerability Database".
Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7467
📖 Read
via "National Vulnerability Database".
Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7466
📖 Read
via "National Vulnerability Database".
Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.📖 Read
via "National Vulnerability Database".
⚠ For sale: Gray-market iPhones that yield secrets to encryption ⚠
📖 Read
via "Naked Security".
The prototype iPhones are slipping out of Apple's supply chain with disabled security, to the delight of researchers and jailbreakers.📖 Read
via "Naked Security".
Naked Security
Developer-only iPhones help reveal Apple’s secret security sauce
The prototype iPhones are slipping out of Apple’s supply chain with disabled security, to the delight of researchers and jailbreakers.
⚠ Windows Calculator is going open source ⚠
📖 Read
via "Naked Security".
Can the combined power of the world’s developers possibly improve the iconic Windows Calculator app? Microsoft seems to think so.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Zuck says Facebook is becoming more “privacy focused” ⚠
📖 Read
via "Naked Security".
Facebook's planning a new, highly integrated platform and talking a lot about encrypted messaging.📖 Read
via "Naked Security".
Naked Security
Zuck says Facebook is becoming more “privacy focused”
Facebook’s planning a new, highly integrated platform and talking a lot about encrypted messaging.
🔐 How to create a transformational cybersecurity strategy: 3 paths 🔐
📖 Read
via "Security on TechRepublic".
Enterprises must build a security strategy that is aligned with business needs.📖 Read
via "Security on TechRepublic".
TechRepublic
How to create a transformational cybersecurity strategy: 3 paths
Enterprises must build a security strategy that is aligned with business needs.
⚠ Firefox picks up advertiser-dodging tech from Tor ⚠
📖 Read
via "Naked Security".
Letterboxing comes straight from the Tor browser, and will help Firefox users avoid advertisers that follow them around the web.📖 Read
via "Naked Security".
Naked Security
Firefox picks up advertiser-dodging tech from Tor
Letterboxing comes straight from the Tor browser, and will help Firefox users avoid advertisers that follow them around the web.