com.github.ccweixiao:hbase-sdk-thrift-core_1.x (>=2.0.7, <=2.0.8), org.apache.hbase:hbase-assembly (>=1.4.0, <=1.4.4) +1 more potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (>=1.4.0, <=1.4.4)

org.apache.hbase:hbase-thrift MAVEN version =1.4.0, =2.0.7, =1.4.0, =1.4.0, =1.4.4 Source cves: CVE-2018-8025 Source advisory: OSV:GHSA-R86J-2GC6-2CQ9...

org.apache.hbase:hbase-assembly (2.0.0), org.apache.hbase:hbase-examples (2.0.0) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (2.0.0)

org.apache.hbase:hbase-thrift MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-assembly 2.0.0 - org.apache.hbase:hbase-examples 2.0.0 Source cves:...

org.apache.hbase:hbase-examples (0.98.21-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.21-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.21-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.21-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.96.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.96.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.96.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.96.1-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.3-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.3-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.3-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.3-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.16.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.16.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.16.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.16.1-hadoop1 Source cves: CVE-2018-8025 Source...

org.apache.hbase:hbase-examples (0.98.16-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.16-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.16-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.16-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.22-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.22-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.22-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.22-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.cxf.fediz.examples:jaxrsspringsecuritywebapp (>=1.3.0, <=1.3.2), org.apache.cxf.fediz.examples:springpreauthwebapp (>=1.1.0, <=1.3.2) +6 more potentially affected by CVE-2017-12631 via org.apache.cxf.fediz:fediz-spring (>=1.1.0, <=1.3.2)

org.apache.cxf.fediz:fediz-spring MAVEN version =1.1.0, =1.3.0, =1.1.0, =1.1.0, =1.2.0, =1.2.0, =1.1.0, =1.1.0, =1.1.0, =1.3.2 Source cves: CVE-2017-12631 Source advisory: OSV:GHSA-FV7X-4HPC-HF9F...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1331 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

org.apache.storm:flux-core (>=1.2.0, <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0, <=1.2.1) +14 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (>=1.2.0, <=1.2.1)

org.apache.storm:storm-core MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.1 and more Source cves: CVE-2018-8008 Source advisory: OSV:GHSA-898J-5CC8-CMF5...

com.github.intel-hadoop:gearpump-experiments-storm_2.11 (>=0.3.4, <=0.4.1), com.github.ptgoetz:flux (0.1.0) +3 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (0.9.3)

org.apache.storm:storm-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - com.github.intel-hadoop:gearpump-experiments-storm2.11 =0.3.4, =0.1.3, =0.0.13, =0.0.14 Source cves:...

Atlas - Quick SQLMap Tamper Suggester

Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code. Screen Installation $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py Usage $ python atlas.py --url http://site.com/index.php?id=PriceASC...

[SECURITY] Fedora 29 Update: yum-utils-1.1.31-517.fc29

yum-utils is a collection of utilities and examples for the yum package manager. It includes utilities by different authors that make yum easier and more powerful to use. These tools include: debuginfo-install, find-repos-of-install, needs-restarting, package-cleanup, repoclosure, repodiff,...

Running a security awareness program

So, you've finally convinced management of the need for security awareness training. What next? I’ve been performing security awareness training for around 10 years, and doing it full time here at PTP for the last 3 and a half years. From the thousands of sessions I have run I’ve found the most...

Public Shaming of Companies for Bad Security

Troy Hunt makes some good points, with good examples...

Firework - Leveraging Microsoft Workspaces in a Penetration Test

Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process. The tool also wraps some code from Responder to leverage its ability to capture NetNTLM hashes from a system that provisions a Workplace feed via it. This tool may...