RHSA-2020:1113 Red Hat Security Advisory: bash security update

Bulletin has no description...

RHSA-2017:1931 Red Hat Security Advisory: bash security and bug fix update

Bulletin has no description...

RHSA-2017:0725 Red Hat Security Advisory: bash security and bug fix update

Bulletin has no description...

RHSA-2011:1073 Red Hat Security Advisory: bash security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2011:0261 Red Hat Security Advisory: bash security and bug fix update

Bulletin has no description...

RHSA-2014:1865 Red Hat Security Advisory: bash Shift_JIS security update

Bulletin has no description...

RHSA-2014:1293 Red Hat Security Advisory: bash security update

Bulletin has no description...

RHSA-2014:1312 Red Hat Security Advisory: bash Shift_JIS security update

Bulletin has no description...

RHSA-2014:1311 Red Hat Security Advisory: bash security update

Bulletin has no description...

RHSA-2014:1306 Red Hat Security Advisory: bash security update

Bulletin has no description...

RHSA-2014:1295 Red Hat Security Advisory: bash Shift_JIS security update

Bulletin has no description...

RHSA-2014:1294 Red Hat Security Advisory: bash security update

Bulletin has no description...

The vulnerability of the Bash command shell on the Cisco NX-OS operating system of Cisco Nexus 3000 and Nexus 9000 switches allows a hacker to execute arbitrary commands.

The vulnerability of the Bash command shell on the Cisco NX-OS operating system of Cisco Nexus 3000 and Nexus 9000 switches is related to the absence of authentication. Exploiting this vulnerability allows an attacker to execute arbitrary commands in the basic operating system...

Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking

Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. "Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions," Cado Security researchers Tara Gould and Nate...

Apache Mod_cgi Bash Environment Variable Injection (Shellshock) Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache modcgi Bash Environment Variable Injection Shellshock Scanner', 'Description' = %q This module scans for the Shellshock vulnerability, a...

Cisco NX-OS Software Elevation of Privilege Vulnerability (CNVD-2024-37700)

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. An elevation of privilege vulnerability exists in Cisco NX-OS Software, which stems from insufficient security restrictions when executing application parameters from a Bas...

Cisco NX-OS Software License Issue Vulnerability (CNVD-2024-37701)

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. Cisco NX-OS Software has an authorization issue vulnerability that stems from insufficient security restrictions when executing commands from the Bash shell. An attacker...

NetIQ Advanced Authentication Command Execution Vulnerability

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A command execution vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which can be exploit...

CVE-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

CVE-2024-20411

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code as root on an affected device. This vulnerability is due to insufficient security restrictions when executing commands from the Bash shell. An...