3512 matches found
New malware attack turns Elasticsearch databases into DDoS botnet
By Uzair Amir The malware attack involves two stages including one in which existing cryptomining malware is removed and other remove configuration files. This is a post from HackRead.com Read the original post: New malware attack turns Elasticsearch databases into DDoS botnet...
VulnWhisperer - Create Actionable Data From Your Vulnerability Scans
Createactionable data from your vulnerability scans VulnWhisperer is a vulnerability management tool and report aggregator. VulnWhisperer will pull all the reports from the different Vulnerability scanners and create a file with a unique filename for each one, using that data later to sync with...
PasteHunter - Scanning Pastebin With Yara Rules
PasteHunter is a python3 application that is designed to query a collection of sites that host publicly pasted data. For all the pasts it finds it scans the raw contents against a series of Yara rules looking for information that can be used by an organisation or a researcher. For setup...
Privilege Escalation
elasticsearch is vulnerable to privilege escalation. An attacker is able to gain additional permissions against a restricted index due to failure to perform certain permission checks when xpack.security.dlsfls.enabled is configured with false value in the elasticsearch.yml file...
Ann Day honey network capture“use of the ElasticSearch Groovy vulnerability Monroe coin(Dog)mining”event analysis-vulnerability warning-the black bar safety net
1, Overview 2019 6 May 13, Ann Day honey network capture to use CVE-2015-1427ElasticSearch Groovyremote command execution vulnerability attacks. The vulnerability principle is Elaticsearch groovy as a scripting language, and based on the use of black and white lists of the sandbox mechanism to...
Exploit for Path Traversal in Elasticsearch
CVE-2015-3337 CVE-2015-3337 任意文件读取 http://10.10.20.1...
200k Personal Records Exposed by Events Planning Firm
A database belonging to Australian event planning startup, Amazingco, was found leaking more than 200,000 records with personal details tied to children’s entertainment, wine tour events and more. Amazingco, which is based in Austrailia but offers services in New Zealand and the U.S., connects...
Photon OS 2.0: Elasticsearch PHSA-2019-2.0-0155
An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0155. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Security Bulletin: Multiple vulnerabilities in Kibana affect IBM Compose for Elasticsearch
Summary Multiple vulnerabilities in Kibana affect IBM Compose for Elasticsearch. Vulnerability Details CVEID: CVE-2019-7609 DESCRIPTION: Elastic Kibana could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in the Timelion visualizer. By sending a specially-crafte...
Critical Photon OS Security Update - PHSA-2019-3.0-0014
Updates of 'openjdk8', 'openssh', 'mercurial', 'elasticsearch', 'sqlite', 'kibana', 'libpng' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2019-0014
Updates of 'kibana', 'sqlite', 'elasticsearch', 'openssh', 'openjdk8', 'mercurial', 'libpng' packages of Photon OS have been released...
Ladders, SkyMed Leak Employment, Medical Data for Millions
Cloud storage misconfigurations continue to plague the data-privacy space, as evidenced by the new discovery of employment and health information for millions exposed on the web, wide open to any internet passerby. Two misconfigured cloud databases inadvertently leaked personally identifiable...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0155
An update of 'kibana', 'elasticsearch' packages of Photon OS has been released...
Critical Photon OS Security Update - PHSA-2019-0155
Updates of 'kibana', 'elasticsearch' packages of Photon OS have been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0225
An update of 'elasticsearch', 'kibana' packages of Photon OS has been released...
Critical Photon OS Security Update - PHSA-2019-0225
Updates of 'kibana', 'elasticsearch' packages of Photon OS have been released...
SilkETW - Flexible C# Wrapper For ETW (Event Tracing for Windows)
SilkETW is a flexible C wrapper for ETW, it is meant to abstract away the complexities of ETW and give people a simple interface to perform research and introspection. While SilkETW has obvious defensive and offensive applications it is primarily a research tool in it's current state. For easy...
W12Scan - A Simple Asset Discovery Engine For Cybersecurity
Chinese W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. Here is a web source program, but the scanning end is at w12scan-client Thinking Based on python3 + django + elasticsearch + redis and use the web restful api to add scan...
Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.10 bug fix update
Red Hat OpenShift Container Platform release 3.10.127 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...
