[FD] SEC Consult SA-20170117-0 :: XSS in Recommend Page extension for TYPO3 CMS (pb_recommend_page)

2017-01-17 Thread SEC Consult Vulnerability Lab
SEC Consult Vulnerability Lab Security Advisory < 20170117-0 > === title: Cross Site Scripting (XSS) product: Recommend Page extension for TYPO3 CMS (pb_recommend_page) vulnerable version: &

[FD] EuskalHack Security Congress CFP

2017-01-17 Thread Joxean Koret
] EuskalHack Call For Papers / Call For Trainings [ TL;DR: Awesome security conference in Donostia-San Sebastian (Basque Country) with even more awesome food happening in June 23-24th 2017. If it sounds great to you, continue reading ;) Introduction EuskalHack Security Congress

[FD] Reflected Cross-Site Scripting (XSS) in Atlassian Jira Software

2017-01-17 Thread Roberto Soares
=[ Tempest Security Intelligence -ADV-2/2016 CVE-2016-6285 ]== Reflected Cross-Site Scripting (XSS) in Atlassian Jira Software --- Author(s): - Roberto Soares - roberto.soares () tempest.com.br

[FD] Multiple RCE in ZyXEL / Billion / TrueOnline routers

2017-01-17 Thread Pedro Ribeiro
Hi, TrueOnline is a Thai ISP that distributes customised versions of ZyXEL and Billion routers - customised with vulnerabilities that is. The routers contain several default administrative accounts and command injections that can be abused by authenticated and unauthenticated attackers. Details

[FD] Security BSides Ljubljana 0x7E1 CFP - March 10, 2017

2017-01-17 Thread Andraz Sraka
-=[ BSidesLjubljana Event info ]=-=-=-=-=-=-=-=-=-=-=-=-=-=-  BSidesLjubljana - https://bsidesljubljana.si   Date: March 10th, 2017 Venue: Poligon creative centre, Ljubljana, Slovenia, Europe   CFP URL: https://bsidesljubljana.si/cfp/ CFP Submit form: https://goo.gl/forms/QXrdRm68rdJyV1ax2 Email: