CVE-2017-18366

CVE-2017-18366 relates to Subrion CMS 4.1.5 and is a CSRF in the blog/delete/ action. The Red Hat and GitHub advisory records corroborate a CSRF vulnerability in Subrion CMS 4.1.5 and note mitigations have been applied in a newer release. The issue originates from insufficient CSRF protections, e...

CVE-2017-18366

Subrion CMS 4.1.5 has CSRF in blog/delete/...

CVE-2017-18366

Subrion CMS 4.1.5 has CSRF in blog/delete/...

PT-2019-8303

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 4.2.1 Description The issue concerns cross-site request forgery in the "blog/delete/" endpoint. This allows for unauthorized actions to be performed. Recommendations For versions prior to 4.2.1, update to version...

CVE-2017-18366: Cross-Site Request Forgery (CSRF)

Subrion CMS 4.1.5 has CSRF in blog/delete/...

Zimbra Collaboration Autodiscover Servlet XXE / ProxyServlet SSRF

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zimbra Collaboration Autodiscover Servlet XXE and ProxyServlet SSRF', 'Description' = %q This module exploits an XML external entity vulnerabilit...

April 2019 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide. Tags Security Advisory Securi...

Friday Squid Blogging: Fried Squid Recipe

This is an easy fried squid recipe with saffron and agrodolce. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Facebook Exposed Data Again, but This Viral Cat Can Save Lives

Catch up on the most important news today in 2 minutes or less...

Mimikatz v2.2.0 - A Post-Exploitation Tool to Extract Plaintexts Passwords, Hash, PIN Code from Memory

mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. But that's not all!...

LogicalDOC 8.2 Path Traversal Vulnerability

Impact In order to exploit this vulnerability an attacker needs to be an authenticated read-only user of the role guest. The attacker can read arbitrary files and create arbitrary directories on the server with the permissions of the user running the web server. It is recommended to update...

WPScan v3.4.5 - Black Box WordPress Vulnerability Scanner

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites. INSTALL Prerequisites Optional but highly recommended: RVM Ruby = 2.3 - Recommended: latest Ruby 2.5.0 to 2.5.3 can caus...

Your Facebook Password Isn’t Safe. Neither Is Your Android Phone

Catch up on the most important tech news today in two minutes or less...

Beers with Talos Ep. #49: POS Malware, RSA Highlights, and SOL OpSec Fails

Beers with Talos BWT Podcast Ep. 49 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded March 15, 2019. We recorded this after coming back from RSA, with some on-location highlights included. This episode ope...

PCI & SSL/Early TLS QIDs 38601, 42366

Two QIDs will be marked as PCI Fail on May 1, 2019 as required by ASV Program Guide: QID 38601 “SSL/TLS Use of Weak RC4 Cipher” QID 42366 “SSLv3.0/TLSv1.0 Protocol Weak CBC Mode Server Side Vulnerability BEAST” Last revision of ASV Program Guide ver. 3.1 has the following for SSL/TLS component: “...

SQL Injection Vulnerability in MileagePlus PHP Blog System

MileagePHP Blog System is a blog system based on ThinkPHP development. MileagePHP Blog System suffers from a SQL injection vulnerability. It allows attackers to exploit the vulnerability to obtain sensitive database information...

PT-2019-19856

Name of the Vulnerable Software and Affected Versions Blog mini version 1.0 Description A security issue exists in the application, where an XSS attack can be performed via the author name of a comment reply. This issue is related to the articleDetails function in the app/main/views.py file and t...

Rails -- Action View vulnerabilities

Ruby on Rails blog: Rails 4.2.11.1, 5.0.7.2, 5.1.6.2, 5.2.2.1, and 6.0.0.beta3 have been released! These contain the following important security fixes. It is recommended that users upgrade as soon as possible: CVE-2019-5418 File Content Disclosure in Action View CVE-2019-5419 Denial of Service...

Videos and Links from the Public-Interest Technology Track at the RSA Conference

Yesterday at the RSA Conference, I gave a keynote talk about the role of public-interest technologists in cybersecurity. Video here. I also hosted a one-day mini-track on the topic. We had six panels, and they were all great. If you missed it live, we have videos: How Public Interest Technologist...

The Voice of Tech: Who We Are, What We Want to Say

Have you ever wondered what it might be like to see inside one of the biggest tech companies in the world? Well, we're starting a new series of blogs to give you the insight you've never had before. Akamai's innovations...