Cross site scripting

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

CVE-2018-16607

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

CVE-2018-16607

Open-AudIT Professional Edition 2.2.7 contains a Cross-Site Scripting (XSS) vulnerability in the Orgs Page, exploitable via the Orgs name field. The issue allows remote attackers to inject arbitrary web script/HTML. Affected software is Open-AudIT Professional Edition (2.2.7); the root cause is r...

Microsoft and Imperva Collaboration Bolsters Data Compliance and Security Capabilities

This article explains how Imperva SecureSphere V13.2 has leveraged the latest Microsoft EventHub enhancements to help customers maintain compliance and security controls as regulated or sensitive data is migrated to Azure SQL database instances. Database as a Service Benefits Platform as a Servic...

CVE-2018-16144

The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancidpassword parameter...

Cross site request forgery (csrf)

OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html...

CVE-2018-16449

OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html...

CVE-2018-16449

OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html...

AWS Slurp Github Takeover

Slurp is a tool used by information security professionals to enumerate AWS S3 buckets. Slurp takes a domain name example.com or wordlist as input and cycles through likely S3 bucket names example.s3.amazonaws.com looking for any world-read/writeable buckets. S3 buckets are a great find for...

Microsoft Windows: Audit Audit Policy Change

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winauditpolicychange.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Audit Policy Change Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Sensitive Privilege Use

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsensitiveprivilegeuse.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Sensitive Privilege Use Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows: Audit Application Group Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winapplicationgroupmanagement.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Application Group Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Audit Security Group Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecuritygroupmanagement.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Security Group Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Windows: Audit Removable Storage

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremovablestorage.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Removable Storage Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Special Logon

Audit Special Logon determines whether the operating system generates audit events under special sign on or log on circumstances. This subcategory allows you to audit events generated by special logons such as the following: - The use of a special logon, which is a logon that has...

Microsoft Windows: Audit Logon

Audit Logon determines whether the operating system generates audit events when a user attempts to log on to a computer. These events are related to the creation of logon sessions and occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was...

Nextcloud Server 'JSON Encoder' Security Bypass Vulnerability

Nextcloud Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows: Audit Other System Events

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winothersystemevents.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Other System Events Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Process Creation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winprocesscreation.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Process Creation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Other Account Management Events

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winotheraccountevents.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Other Account Management Events Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...