what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files Date: 2018-04-28

Cockpit CMS 0.5.5 Server-Side Request Forgery

Posted Apr 28, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Cockpit CMS versions 0.4.4 through 0.5.5 suffer from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14611, CVE-2018-9302

SHA-256 | 877fb3147fad9053c21d2ae76bcbba82752af4be9b3e9a70fa171c8a6b4a756e

Download | Favorite | View

Debian Security Advisory 4181-1

Posted Apr 28, 2018

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4181-1 - Andrea Basile discovered that the 'archive' plugin in roundcube, a skinnable AJAX based webmail solution for IMAP servers, does not properly sanitize a user-controlled parameter, allowing a remote attacker to inject arbitrary IMAP commands and perform malicious actions.

tags | advisory, remote, arbitrary, imap

systems | linux, debian

advisories | CVE-2018-9846

SHA-256 | 7003e22c47aad0f29075ef56927b0bb2fd415a5a734d9b6f25a33893ba5a6af7

Download | Favorite | View

Debian Security Advisory 4182-1

Posted Apr 28, 2018

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4182-1 - Several vulnerabilities have been discovered in the chromium web browser.

tags | advisory, web, vulnerability

systems | linux, debian

advisories | CVE-2018-6056, CVE-2018-6057, CVE-2018-6060, CVE-2018-6061, CVE-2018-6062, CVE-2018-6063, CVE-2018-6064, CVE-2018-6065, CVE-2018-6066, CVE-2018-6067, CVE-2018-6068, CVE-2018-6069, CVE-2018-6070, CVE-2018-6071, CVE-2018-6072, CVE-2018-6073, CVE-2018-6074, CVE-2018-6075, CVE-2018-6076, CVE-2018-6077, CVE-2018-6078, CVE-2018-6079, CVE-2018-6080, CVE-2018-6081, CVE-2018-6082, CVE-2018-6083, CVE-2018-6085, CVE-2018-6086

SHA-256 | bf467922f499761124cd3e7e1500636dd40ac227780bc16080c337465230a2ad

Download | Favorite | View