258 matches found
First steps with Docker: installation in CentOS 7, vulnerability assessment, interactive mode and saving changes
Docker and containerization are literally everywhere. IMHO, this changes the IT landscape much more than virtualization and clouds. Let's say you have a host, you checked it and find out that there are no vulnerable packages. But what's the point if this host runs Docker containers with their own...
CVE-2019-8982
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...
VMware vRealize Operations Manager 6.6.x < 6.6.1.11286876 / 6.7.x < 6.7.0.11286837 / 7.x < 7.0.0.11287810 Local Privilege Escalation Vulnerability (VMSA-2018-0031)
The version of VMware vRealize Operations vROps Manager running on the remote web server is 6.6.x prior to 6.6.1.11286876, 6.7.x prior to 6.7.0.11286837, or 7.x prior to 7.0.0.11287810. It is, therefore, affected by a privilege escalation vulnerability due to improper permissions of support...
(RHSA-2018:3806) Low: Red Hat Enterprise Linux 6.6 Telco Update Service One-Month Notice
In accordance with the Red Hat Enterprise Linux Errata Support Policy, Telco Update Service TUS for Red Hat Enterprise Linux 6.6 will be retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...
Design/Logic Flaw
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNKHOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNKHOME/bin, becau...
CVE-2017-18348
CVE-2017-18348 affects Splunk Enterprise 6.6.x. When configured to run as root but drop privileges to a non-root account, local users can escalate privileges by abusing access to the non-root account to modify $SPLUNK_HOME/etc/splunk-launch.conf and insert trojan programs into $SPLUNK_HOME/bin. T...
Wavemaker Studio 6.6 - Server-Side Request Forgery Vulnerability
Exploit for java platform in category web applications Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery SSRF. Exploit Author: Gionathan "John" Reale Vendor Homepage: http://www.wavemaker.com/ Software Link:...
Cross site request forgery (csrf)
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface...
Wavemaker Studio 6.6 - Server-Side Request Forgery
Wavemaker Studio 6.6 - Server-Side Request Forgery Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery SSRF. Exploit Author: Gionathan "John" Reale Google Dork: N/A Date: 2018-08-01 Vendor Homepage: http://www.wavemaker.com/ Software Link:...
Wavemaker Studio 6.6 - Server-Side Request Forgery
Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery SSRF. Exploit Author: Gionathan "John" Reale Google Dork: N/A Date: 2018-08-01 Vendor Homepage: http://www.wavemaker.com/ Software Link: https://github.com/cloudjee/wavemaker/blob/master/wavemaker/wavemaker-studio/ Affected Version...
(RHSA-2018:2114) Low: Red Hat Enterprise Linux 6.6 TUS Six-Month Notice
In accordance with the Red Hat Enterprise Linux Errata Support Policy, Telecommunications Update Service for Red Hat Enterprise Linux 6.6 will be retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including...
RHEL 6 : librelp (RHSA-2018:1701)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1701 advisory. Librelp is an easy-to-use library for the Reliable Event Logging Protocol RELP protocol. RELP is a general-purpose, extensible logging protocol...
CVE-2017-5826
An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5826
An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5827
A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5828
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5824
An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5827
A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...