5505 matches found
Improper Neutralization
Improper Neutralization in github.com/aws/aws-sdk-go/service/s3/s3crypto...
Critical Photon OS Security Update - PHSA-2022-4.0-0152
Updates of 'linux-esx', 'strongswan', 'linux-aws', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
AWS-Loot - Pull Secrets From An AWS Environment
Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services. Install pip install -r requirements.txt An AWS credential file .aws/credentials is required for authentication t...
Critical Photon OS Security Update - PHSA-2022-0361
Updates of 'linux-aws', 'linux-secure', 'linux', 'apache-tomcat', 'linux-rt', 'linux-esx', 'go', 'strongswan', 'mariadb' packages of Photon OS have been released...
Five Takeaways from FlexBooker’s Data Breach
A few weeks ago, an appointment scheduling solution, FlexBooker notified its customers that it had been breached. Imperva has no specific insider knowledge into how the breach unfolded, but we can learn a lot from FlexBooker’s data breach notification as well as additional related sources. In thi...
Securitas breached, 3TB of airport employee records exposed
An unsecured AWS server, found open to the public Internet, is the root cause of a huge compromise of data of airport employees in Colombia and Peru. This server, according to a report, belongs to Securitas, a Stockholm-based multinational company that provides security services like security...
Important Photon OS Security Update - PHSA-2022-0440
Updates of 'go', 'linux-aws', 'linux', 'polkit', 'linux-esx', 'apache-tomcat', 'linux-secure' packages of Photon OS have been released...
ec2-18-235-33-250.compute-1.amazonaws.com Cross Site Scripting vulnerability OBB-2358467
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Important Photon OS Security Update - PHSA-2022-0151
Updates of 'linux-aws', 'linux-secure', 'linux-rt', 'linux', 'linux-esx' packages of Photon OS have been released...
CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday published an Industrial Controls Systems Advisory ICSA warning of multiple vulnerabilities in the Airspan Networks Mimosa equipment that could be abused to gain remote code execution, create a denial-of-service DoS...
Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Security 3.68 security and enhancement update
Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes a bug fixes, security patches and new feature enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scorin...
USN-5268-1: Linux kernel vulnerabilities
Keyu Man discovered that the ICMP implementation in the Linux kernel did not properly handle received ICMP error packets. A remote attacker could use this to facilitate attacks on UDP based services that depend on source port randomization. CVE-2021-20322 It was discovered that the Bluetooth...
AWS Elastic Beanstalk Dockerrun Detected
AWS Elastic Beanstalk is a Platform-as-a-Service PaaS feature provided by Amazon Web Services which allows developers to quickly deploy their web applications in various predefined environments Java, .NET, PHP... without managing the underlying infrastructure configuration. AWS Elastic Beanstalk...
Airspan Networks Mimosa
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Airspan Networks Equipment: Mimosa by Airspan product line Vulnerabilities: Improper Authorization, Incorrect Authorization, Server-side Request Forgery, SQL Injection, Deserialization of Untrusted...
ec2-35-166-176-144.us-west-2.compute.amazonaws.com Cross Site Scripting vulnerability OBB-2355596
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ec2-35-166-176-144.us-west-2.compute.amazonaws.com Cross Site Scripting vulnerability OBB-2353794
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Critical Photon OS Security Update - PHSA-2022-3.0-0356
Updates of 'linux-aws', 'vim', 'openssh', 'polkit', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'glibc' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-4.0-0148
Updates of 'linux-esx', 'linux-aws', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
Ubuntu: Security Advisory (USN-4997-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...