Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2020-140-01)

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-140-01. The text itself is copyright C Slackware Linux,...

CVE-2016-11057

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2...

CVE-2016-11055

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before...

CVE-2019-12002

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...

Session fixation

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...

CVE-2019-12002

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...

CVE-2019-12001

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...

CVE-2019-10609

creationtimestamp| type| source ---|---|--- 2020-04-16 17:02:25+00:00| seen| https://t.me/cibsecurity/11335 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2020-2944

creationtimestamp| type| source ---|---|--- 2020-04-15 09:08:52+00:00| published-proof-of-concept| https://t.me/techpwnews/427 2020-04-15 21:43:43+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6383 2021-02-03 12:43:01+00:00| published-proof-of-concept|...

Cross site scripting

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent stored and reflected XSS vulnerabilities...

CVE-2020-11553

An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF...

HikPwn - A Simple Scanner For Hikvision Devices

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some of Hikvision's software and devices. Setup instructions: git clone...

CVE-2018-11106

creationtimestamp| type| source ---|---|--- 2020-04-01 20:58:16+00:00| seen| https://t.me/cibsecurity/10912...

CVE-2019-3944

creationtimestamp| type| source ---|---|--- 2020-04-01 20:58:14+00:00| seen| https://t.me/cibsecurity/10910...

CVE-2020-10231

creationtimestamp| type| source ---|---|--- 2020-04-01 19:28:26+00:00| seen| https://t.me/cibsecurity/10906 2024-10-18 17:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/888...

VISAM Automation Base (VBASE) (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow...

CVE-2020-7982

OpenWrt/OpenWrt-derived builds are affected by CVE-2020-7982. A bug in the opkg package manager fork (before 2020-01-25) misparses embedded checksums in the signed repository index, enabling a man-in-the-middle attacker to inject arbitrary package payloads that are installed without verification....

CVE-2016-1487

creationtimestamp| type| source ---|---|--- 2020-03-09 21:43:08+00:00| seen| https://t.me/cibsecurity/10390 2024-01-06 17:59:49+00:00| seen| https://t.me/arpsyndicate/2566...

Creative Contact Form 4.6.2 Directory Traversal

Directory Traversal in Creative Contact Form Overview Identifier: AIT-SA-20200301-01 Target: Creative Contact Form for Joomla Vendor: Creative Solutions Version: 4.6.2 before Dec 03 2019 CVE: CVE-2020-9364 Accessibility: Remote Severity: Critical Author: Wolfgang Hotwagner AIT Austrian Institute ...

Creative Contact Form 4.6.2 Directory Traversal Vulnerability

Creative Contact Form version 4.6.2 before Dec 03 2019 suffers from a directory traversal vulnerability. Directory Traversal in Creative Contact Form Overview Identifier: AIT-SA-20200301-01 Target: Creative Contact Form for Joomla Vendor: Creative Solutions Version: 4.6.2 before Dec 03 2019 CVE:...