15877 matches found
VMware vRealize Operations Published Applications (V4PA) Desktop Agent Detection (Windows SMB Login)
SMB login-based detection of VMware vRealize Operations Published Applications V4PA Desktop Agent. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Debian DLA-1299-1 : libjgraphx-java security update
It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 'Wheezy', this issue has been fixed in libjgraphx-java version 1.4.1.0-3+deb7u1. We recommend that you upgrade your libjgraphx-java packages...
Explained: SQL injection
Even though SQL injection is a type of attack that is relatively easy to prevent, it is one of the most common web hacking techniques. So, what’s it all about? The basics SQL is short for Structured Query Language and usually pronounced as “sequel.” SQL is a standard language used to query and...
Application Security Testing — The Wallarm Approach
Testing the security of the corporate applications is a part of every-day life for Ops and DevOps professionals. Larger companies have whole teams dedicated to independent security testing, called Red Teams. These folks use various tools at their disposal to discover the flaws in both application...
Passhunt - Tool For Searching Of Default Credentials For Network Devices, Web Applications And More
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. How to install? git clone https://github.com/Viralmaniar/Passhunt.git cd Passhunt pip3 install -r requirements.txt python...
Vulnerability in client (CVE-2018-1058)
Uncontrolled search path element in pgdump and other client applications...
PostgreSQL vulnerabilities
The PostgreSQL project reports: CVE-2018-1058: Uncontrolled search path element in pgdump and other client applications...
CVE-2017-18201
A double-free flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files...
Chrome OS Will Soon Start Supporting Linux Applications
By Uzair Amir We do know that there is a deep underlying connection This is a post from HackRead.com Read the original post: Chrome OS Will Soon Start Supporting Linux Applications...
XXE Zeroday Vulnerability in HP PPM
Intro: XXE Zeroday Vulnerability in HP PPM Researchers at Rhino Security Labs discovered an XXE vulnerability in the way HP Project and Portfolio Management Center HP PPM processed imported tickets. Specifically, an XML external entity injection vulnerability allows an attacker to exploit the...
CVE-2017-18193
fs/f2fs/extentcache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service BUG via an application with multiple threads...
MADLIRA - Malware detection using learning and information retrieval for Android
MADLIRA is a tool for Android malware detection. It consists in two components: TFIDF component and SVM learning component. In gerneral, it takes an input a set of malwares and benwares and then extracts the malicious behaviors TFIDF component or computes training model SVM classifier. Then, it...
[SECURITY] Fedora 27 Update: patch-2.7.6-3.fc27
The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file patching th...
PSNews Website 1.0.0 - 'Keywords' SQL Injection
Exploit Title: PSNews Website Same Backend with Mobile Apps 1.0.0 - 'Keywords' SQL Injection Dork: N/A Date: 2018-02-16 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://codecanyon.net/item/psnews-website/21360354?srank=9 Version: 1.0.0 Category:...
PT-2018-15511 · Sap · Sap Hana Extended Application Services
Name of the Vulnerable Software and Affected Versions: SAP HANA Extended Application Services version 1.0 Description: The issue allows unauthorized users to read statistical data about deployed applications, including resource consumption. Recommendations: For SAP HANA Extended Application...
February 13, 2018—KB4074588 (OS Build 16299.248)
None None...
Debian: Security Advisory (DSA-4109-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability in the `mozilla::a11y::DocAccessible::PutChildrenBack` function of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a attacker to trigger a service failure.
The vulnerability of the mozilla::a11y::DocAccessible::PutChildrenBack function in Mozilla Firefox, Firefox ESR, and the Thunderbird email client arises due to an operation that goes beyond the buffer boundaries in memory when working with ARIA Accessible Rich Internet Applications attributes usi...