Debian Linux Security Advisory 5454-1 - Riccardo Bonafede discovered that the Kanboard project management software was susceptible to SQL injection.
18eefed3ebe39ff36c87563a57b0277684c2fa9ea2f2a89e2acad4f78ab7abe0
Travelable version 1.0 suffers from a persistent cross site scripting vulnerability.
483b7379d6746e29939cfcc3bd586a0761ad1e3adc01b8d25cf71ae711941c91
BloodBank version 1.1 suffers from a remote SQL injection vulnerability.
885e03ad394ceda3c223b3e3729ea672c5ac1d3a4a60cdcdda0ad34c82ab4ecc
Ubuntu Security Notice 6184-2 - USN-6184-1 fixed a vulnerability in CUPS. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service, or to possibly obtain sensitive information.
5dde86b9848b107dfcc1a3f6aa9837a89257faec56147e2a4e53f34c981b423e
BloodBank version 1.1 suffers from a cross site scripting vulnerability.
5db5ccaaad3706e658aa7d6ba137a4f86d3956c446eb34b6fc8401be0a9baac1
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.
df029dc1108b3c1ce369d55984b0647627eb0377597a1b9b8a9ee71c519fdb88
Carlisting version 1.6 suffers from a cross site scripting vulnerability.
4ec181d6b85fc3d05a555ef234e32019e6d9f8dd20b59b656b08d458885e1b60
Pluck version 4.7.18 suffers from a remote code execution vulnerability.
a1df3ebdcab288690dba75419430ea432d182aca5d0d0433c493775cb8f03fa8
Carlisting version 1.6 suffers from a remote SQL injection vulnerability.
e43c9d8ff0df6541a7979729a8557599a209f31b2cfa1fcad687285ea8d229c3
RecipePoint version 1.9 suffers from a remote SQL injection vulnerability.
efe0b12f3af82a40d847cecea7a51367fa0fd4ff5036bb56424eb3bac86690cd
Cisco UCS-IMC Supervisor version 2.2.0.0 suffers from an authentication bypass vulnerability.
c0df6de9e534c3f016f39f3ff4009a188e694f0c3406df8e82ba6d4ca7e930dc
Debian Linux Security Advisory 5453-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
bf03cf19fdf1082113457772d76c670410af49159578fbd829b09a42c7d23d6d
Lawyer CMS version 1.6 suffers from a cross site scripting vulnerability.
5a8f273350ce7448ce2f5fe5ae41ba57b570fefb6b4ba4eccdc73dd5766efae1
JobSeeker version 1.5 suffers from a cross site scripting vulnerability.
4424ea8cde82412153da91334ad4f489aab8447aa969c5f0b82cc0b53f5ffa63
News Portal version 4.0 suffers from a remote SQL injection vulnerability.
1e39667f0de01587dd58d64ed7b74d13a33d2a4c6f753c5fa1f6fb54b60594c4
Ecommerce version 1.15 suffers from a cross site scripting vulnerability.
190a59e336d8a023c8ad3ec1a90f3fead051893935012a4e7ca5dbbfc40bf78a
Insurance version 1.2 suffers from a cross site scripting vulnerability.
9dd8f0eb8a0797dc78cc70a3788af8a1974d428676692ac1cffbd204ab5d9c9d
Debian Linux Security Advisory 5452-1 - Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code.
a1ee0c8d90ac76d89cdd49ff389b345294fe876a88a5a4fc78a294ba786df213
ProjeQtOr Project Management System version 10.4.1 suffers from multiple cross site scripting vulnerabilities.
9f904699dd3ce2353c3d41ed97e67a207dfd8884e51077d5f0b96123d15441e0
MineStack version 1.0 suffers from a persistent cross site scripting vulnerability.
f80f88a99118b44212cfcc3d7f8339f331c5d795fec330391f2c8609ee473eb1
EX-RATE version 1.0 suffers from a persistent cross site scripting vulnerability.
4b88d29d86e56a3602df2bc9ebaff0ae49e4183369d402e70a10830629debb41
WinterCMS versions prior to 1.2.3 suffer from a persistent cross site scripting vulnerability.
7a05cd2580573d203dca43e892b3cf251579da502950237b74a493130870eb20
Montage version 1.0 suffers from a persistent cross site scripting vulnerability.
5fc9b4f6d1298788a12df12cc9f2e70f4b311e7b0429455ad89914c614f3700f
Wedding Wonders version 1.0 suffers from a persistent cross site scripting vulnerability.
75e85a177f35537ada34f88ab0a6b0509ef2394a025bd941c73edca1767dc941
Admidio version 4.2.10 suffers from a remote code execution vulnerability.
f11ce6c5abc0a0c5eb3cc50b6ab9f8f7c9ec3559b51c129eb57b52b4d3e16ada