Author: Cyberthreat Blog

Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.

Buffer overflow in the “megasas_mmio_write” function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.

FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run...

The expansion of ‘h’ in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in ‘hostname’ of a machine.

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.