#archive

New Online: Occupational Culture of Home Health-Care Workers

Published: 21/02/2019

This post by Stephanie Hall of the American Folklife Center was first published on the center’s blog, “Folklife Today.” An important new oral history collection documenting the lives ... Read more

Source: blogs.loc.gov
Multiple issues in Teracue ENC-400 including pre-authenticated remote code execution

Published: 21/02/2019

Posted by Stephen Shkardoon on Feb 21 Introduction ============ Multiple vulnerabilities were identified within the Teracue ENC-400, including pre-authenticated remote code authentication. While the v ... Read more

Source: seclists.org
[CVE-2019-8938] Cross Site Scripting in VertrigoServ 2.17

Published: 21/02/2019

Posted by Rafael Pedrero on Feb 21 <!-- # Exploit Title: Cross Site Scripting in VertrigoServ 2.17 # Date: 17-02-2019 # Exploit Author: Rafael Pedrero # Vendor Homepage: http://vertrigo.sf.net # So ... Read more

Source: seclists.org

[CVE-2018-18845] Cross Site Scripting in Advanced comment system v1.0

Published: 21/02/2019

Posted by Rafael Pedrero on Feb 21 I thought I had reported it but not, better late than never. <!-- # Exploit Title: Cross Site Scripting in Advanced comment system v1.0 # Date: 29-10-2018 # Explo ... Read more

Source: seclists.org
[CVE-2019-8923, CVE-2019-8924] SQL injection and persistent Cross Site Scripting in XAMPP 5.6.8 (and previous)

Published: 21/02/2019

Posted by Rafael Pedrero on Feb 21 <!-- # Exploit Title: SQL injection in XAMPP 5.6.8 (and previous) # Date: 17-02-2019 # Exploit Author: Rafael Pedrero # Vendor Homepage: https://sourceforge.net/p ... Read more

Source: seclists.org
Re: Reflected Cross-site Scripting Vulnerability in Collabtive 3.1

Published: 21/02/2019

Posted by Henri Salo on Feb 21 CVE-2019-8935 has been assigned for this vulnerability. Read more

Source: seclists.org

Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4

Published: 21/02/2019

Posted by Daniel Bishtawi on Feb 21 Hello, We are glad to inform you about the vulnerabilities we reported in HTMLy 2.7.4. Here are the details: Advisory by Netsparker Name: Cross-Site Scripting Vulne ... Read more

Source: seclists.org
Open Redirection Vulnerability in GetSimpleCMS 3.3.13

Published: 21/02/2019

Posted by Daniel Bishtawi on Feb 21 Hello, We are glad to inform you about the vulnerabilities we reported in GetSimpleCMS 3.3.13. Here are the details: Advisory by Netsparker Name: Open Redirection V ... Read more

Source: seclists.org
Review: Samsung Q90R 4K TV Goes Ultra Wide

Published: 21/02/2019

Samsung has introduced 8K Ultra HD as the highlight of its 2019 QLED TV lineup, but at the same time it is making big advancements in its 4K QLED TVs, like the top-end Q90R series, offering excellent ... Read more

Source: hdguru.com

[SAUTH-2019-0001] - Micro Focus Filr Multiple Vulnerabilities

Published: 21/02/2019

Posted by advisories on Feb 20 SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ Micro Focus Filr Multiple Vulnerabilities 1. *Advisory Information* Title: Micro Focus Filr Multiple Vul ... Read more

Source: seclists.org
[SRP-2018-02] Details of a vulnerability in STMicroelectronics' chipset

Published: 20/02/2019

Posted by Adam Gowdiak on Feb 20 Hello All, Technical details of ST chipset vulnerability has been released and are now included in our technical report pertaining to the security of NC+ SAT TV platfo ... Read more

Source: seclists.org
Medieval Church and State, and the nun who faked her own death

Published: 20/02/2019

In the high summer of 1318, a nun of the priory of St Clement near York – Joan of Leeds – staged a daring escape from her convent. She left behind a life of poverty, self-denial, chastity and obedienc ... Read more

Source: nationalarchives.gov.uk

[SECURITY] [DSA 4396-1] ansible security update

Published: 20/02/2019

Posted by Moritz Muehlenhoff on Feb 20 ------------------------------------------------------------------------- Debian Security Advisory DSA-4396-1 security () debian org https://www.debian.org/secur ... Read more

Source: seclists.org
African-American History Month: First Pan-African Congress

Published: 19/02/2019

This is a guest post by Ryan Reft, a historian in the Manuscript Division. It coincides with the centenary this month of the first Pan-African Congress. The problem of the 20th century is the problem ... Read more

Source: blogs.loc.gov
Defining Shared Values in our Growing Digital Content Management Section

Published: 19/02/2019

When 10 new staff members joined the Digital Content Management (DCM) section last year, our unit more than doubled in size. We were excited to expand the groundbreaking work done by our web archiving ... Read more

Source: blogs.loc.gov

[SECURITY] [DSA 4395-1] chromium security update

Published: 19/02/2019

Posted by Michael Gilbert on Feb 18 ------------------------------------------------------------------------- Debian Security Advisory DSA-4395-1 security () debian org https://www.debian.org/security ... Read more

Source: seclists.org
[SECURITY] [DSA 4394-1] rdesktop security update

Published: 19/02/2019

Posted by Moritz Muehlenhoff on Feb 18 ------------------------------------------------------------------------- Debian Security Advisory DSA-4394-1 security () debian org https://www.debian.org/secur ... Read more

Source: seclists.org
[SECURITY] [DSA 4393-1] systemd security update

Published: 19/02/2019

Posted by Salvatore Bonaccorso on Feb 18 ------------------------------------------------------------------------- Debian Security Advisory DSA-4393-1 security () debian org https://www.debian.org/sec ... Read more

Source: seclists.org

Vizio TV-Spying Settlement Payout Begins Soon

Published: 18/02/2019

If you purchased a Vizio smart TV in the past several years, you might be entitled to a cash payment from the settlement of a class action lawsuit against the “value” TV brand for allegedl ... Read more

Source: hdguru.com
Re: The dream of the LISP machine is alive in the 90ies

Published: 18/02/2019

Posted by the grugq on Feb 18 inline... I like to think I'm as good an armchair philosopher as anyone else that Attacking information processing systems is what I’ve been researching for the last ... Read more

Source: seclists.org
[SECURITY] [DSA 4388-2] mosquitto regression update

Published: 18/02/2019

Posted by Salvatore Bonaccorso on Feb 17 ------------------------------------------------------------------------- Debian Security Advisory DSA-4388-2 security () debian org https://www.debian.org/sec ... Read more

Source: seclists.org

#archive

New Online: Occupational Culture of Home Health-Care Workers

Multiple issues in Teracue ENC-400 including pre-authenticated remote code execution

[CVE-2019-8938] Cross Site Scripting in VertrigoServ 2.17

[CVE-2018-18845] Cross Site Scripting in Advanced comment system v1.0

[CVE-2019-8923, CVE-2019-8924] SQL injection and persistent Cross Site Scripting in XAMPP 5.6.8 (and previous)

Re: Reflected Cross-site Scripting Vulnerability in Collabtive 3.1

Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4

Open Redirection Vulnerability in GetSimpleCMS 3.3.13

Review: Samsung Q90R 4K TV Goes Ultra Wide

[SAUTH-2019-0001] - Micro Focus Filr Multiple Vulnerabilities

[SRP-2018-02] Details of a vulnerability in STMicroelectronics' chipset

Medieval Church and State, and the nun who faked her own death

[SECURITY] [DSA 4396-1] ansible security update

African-American History Month: First Pan-African Congress

Defining Shared Values in our Growing Digital Content Management Section

[SECURITY] [DSA 4395-1] chromium security update

[SECURITY] [DSA 4394-1] rdesktop security update

[SECURITY] [DSA 4393-1] systemd security update

Vizio TV-Spying Settlement Payout Begins Soon

Re: The dream of the LISP machine is alive in the 90ies

[SECURITY] [DSA 4388-2] mosquitto regression update

Review: Best Cleaners for Mac

Kaia Gerber, Adut & Anok Star in Fendi Spring 2019 Campaign

BHP’s capital framework holds up as mine productivity gives way

Drone makers in talks to end flights into sensitive areas

Hunt protests to Berlin over Saudi arms embargo

Judge Rules That Federal Prosecutors Acted Illegally By Concealing Their Ridiculously Lenient Plea Bargain With Jeffrey Epstein

Lessons to Learn? Federal Circuit Disqualifies Firm Adverse to Members of Corporate Family of a Client