shadowbroker

This repository, lvxiao54/shadowbroker, contains a collection of exploits and tools, including the infamous Shadow Brokers dump. The primary focus of this repository is on exploiting vulnerabilities in various software and systems, particularly in the context of Windows and Linux. The repository...

Photon OS 2.0: Sudo PHSA-2021-2.0-0315

An update of the sudo package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0315. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

CentOS 8 : sudo (CESA-2021:0218)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0218 advisory. - sudo: Heap buffer overflow in argument parsing CVE-2021-3156 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : container-tools:1.0 (CESA-2019:4273)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:4273 advisory. - HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9512 - HTTP/2: flood using HEADERS frames results in unbounded memory...

CentOS 8 : dovecot (CESA-2019:3467)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3467 advisory. - dovecot: Improper certificate validation CVE-2019-3814 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : gnutls (CESA-2019:3600)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3600 advisory. - gnutls: use-after-free/double-free in certificate verification CVE-2019-3829 - gnutls: invalid pointer access upon receiving async handshake messages...

ZINC attacks against security researchers

In recent months, Microsoft has detected cyberattacks targeting security researchers by an actor we track as ZINC. The campaign originally came to our attention after Microsoft Defender for Endpoint detected an attack in progress. Observed targeting includes pen testers, private offensive securit...

Fedora 33 : thunderbird (2021-43e458d707)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-43e458d707 advisory. - Update to latest upstream version. FEDORA-2021-43e458d707 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Fedora 32 : 1:php-pear (2021-02996612f6)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-02996612f6 advisory. - Tar.php in ArchiveTar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to...

N. Korean Hackers Targeting Security Experts to Steal Undisclosed Researches

Google on Monday disclosed details about an ongoing campaign carried out by a government-backed threat actor from North Korea that has targeted security researchers working on vulnerability research and development. The internet giant's Threat Analysis Group TAG said the adversary created a...

N. Korean Hackers Targeting Security Experts to Steal Undisclosed Researches

Google on Monday disclosed details about an ongoing campaign carried out by a government-backed threat actor from North Korea that has targeted security researchers working on vulnerability research and development. The internet giant's Threat Analysis Group TAG said the adversary created a...

GLSA-202101-24 : cfitsio: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-24 cfitsio: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cfitsio. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202101-28 : ncurses: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-28 ncurses: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

Drupal 7.x, 8.x, 9.x Archive_Tar library Vulnerability (SA-CORE-2021-001) - Windows

Drupal is prone to a vulnerability in the ArchiveTar library. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Drupal 7.x, 8.x, 9.x Archive_Tar library Vulnerability (SA-CORE-2021-001) - Linux

Drupal is prone to a vulnerability in the ArchiveTar library. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Photon OS 1.0: Atftp PHSA-2021-1.0-0357

An update of the atftp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0357. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145411...

mad-metasploit

This is a Metasploit custom module repository, mad-metasploit, which contains a collection of exploits and plugins for various vulnerabilities. The repository is maintained by hahwul and is available on GitHub. The repository includes a variety of exploits, including: AIX Calendar Manager Service...

SonicWall hacked after 0-day flaws exploited by hackers

By Deeba Ahmed The cybersecurity firm SonicWall has confirmed that it was hacked after hackers exploited 0-day flaws in its VPN product. This is a post from HackRead.com Read the original post: SonicWall hacked after 0-day flaws exploited by hackers...

exploitdb

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. The Exploit Database is a...

CDK - Zero Dependency Container Penetration Toolkit

CDK is an open-sourced container penetration toolkit, designed for offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily. Currently still unde...