Salesforce Buyer Knowledge Presumably Uncovered in API Glitch

Enterprise Vulnerabilities
From DHS/US-CERT's Nationwide Vulnerability Database

CVE-2017-14447
PUBLISHED: 2018-08-06

An exploitable buffer overflow vulnerability exists within the PubNub message handler for the 'advert' channel of Insteon Hub operating firmware model 1012. Specifically crafted instructions despatched by the PubNub service could cause a stack-based buffer overflow overwriting arbitrary information. An attacker ought to ship ...

CVE-2018-14974
PUBLISHED: 2018-08-06

A difficulty was found in QCMS 3.0.1. add/System/Controller/backend/information.php has XSS.

CVE-2018-14975
PUBLISHED: 2018-08-06

A difficulty was found in QCMS 3.0.1. add/System/Controller/backend/album.php has XSS.

CVE-2018-14976
PUBLISHED: 2018-08-06

A difficulty was found in QCMS 3.0.1. add/System/Controller/backend/class.php has XSS.

CVE-2018-14977
PUBLISHED: 2018-08-06

A difficulty was found in QCMS 3.0.1. add/System/Controller/visitor.php has XSS, as demonstrated by the title parameter, a distinct vulnerability than CVE-2018-8070.

!function(f,b,e,v,n,t,s)if(f.fbq)return;n=f.fbq=function()n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments);if(!f._fbq)f._fbq=n;
n.push=n;n.loaded=!0;n.version='2.0';n.queue=;t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e);s.parentNode.insertBefore(t,s)(window,
document,'script','https://connect.facebook.net/en_US/fbevents.js');
fbq('init', '832000476880185');
fbq('track', 'PageView');

(function(d, s, id)
var js, fjs = d.getElementsByTagName(s);
if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "http://connect.facebook.net/en_US/all.js#xfbml=1&appId=640989409269461";
fjs.parentNode.insertBefore(js, fjs);
(document, 'script', 'facebook-jssdk'));



Source link