Mail Thread Index

• Date Index

• [FD] [SYSS-2020-029]: Jira module "Gantt-Chart for Jira" - Improper Privilege Management (CWE-269)(CVE-2020-15943), Sebastian Auwärter
• [FD] [SYSS-2020-030]: Jira module "Gantt-Chart for Jira" - Cross-Site Scripting (CWE-79)(CVE-2020-15944), Sebastian Auwärter
• [FD] October CMS <= Build 465 Multiple Vulnerabilities - Arbitrary File Read, Sivanesh Ashok
• [FD] SEC Consult SA-20200807-0 :: Multiple Vulnerabilities in flatCore CMS, SEC Consult Vulnerability Lab
• [FD] ManageEngine ADSelfService Plus – Unauthenticated Remote Code Execution Vulnerability, Bhdresh
  • Re: [FD] ManageEngine ADSelfService Plus – Unauthenticated Remote Code Execution Vulnerability, Bhdresh
• [FD] Remote Code Execution 0day in vBulletin 5.x, Zenofex via Fulldisclosure
• [FD] SugarCRM < 10.1.0 Multiple Reflected Cross-Site Scripting Vulnerabilities, Egidio Romano
• [FD] SugarCRM < 10.1.0 (Reports Export) SQL Injection Vulnerability, Egidio Romano
• [FD] Avian JVM vm::arrayCopy() Multiple Integer Overflows, Pietro Oliva via Fulldisclosure
• [FD] Avian JVM vm::arrayCopy() silent return on negative length, Pietro Oliva via Fulldisclosure
• [FD] Two vulnerabilities found in MikroTik's RouterOS, Q C
• [FD] New Release: UFONet v1.6 - "M4RAuD3R!"..., psy
• [FD] Payment bypass in WordPress - WooCommerce - NAB Transact plugin disclosure, Jack Misiura via Fulldisclosure
• [FD] Open-Xchange Security Advisory 2020-08-20, Open-Xchange GmbH via Fulldisclosure
• [FD] CVE-2020-24548 / Ericom Access Server for (AccessNow & Ericom Blaze) v9.2.0 / Server Side Request Forgery, hyp3rlinx
• [FD] Google Chromecast Auth Bypass/RCE, Benjamin Floyd
• [FD] NEProfile - Host Header Injection, ghost
• [FD] A Tale of Escaping a Hardened Docker container, Red Timmy Security
• [FD] SEC Consult SA-20200826-0 :: Extensive file permissions on service executable in Eikon Thomson Reuters, SEC Consult Vulnerability Lab
• [FD] SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S, SEC Consult Vulnerability Lab
• [FD] Three vulnerabilities found in MikroTik's RouterOS, Q C
• [FD] Missing Trust Validation in Visual Studio's VSIX Installer, Ostovary, Daniel
• [FD] SUPERAntiSpyware Professional X Trial < 10.0.1206 Local Privilege Escalation, b1nary