CVE-2018-3057

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2916

The CVE-2018-2916 issue affects the Sun ZFS Storage Appliance Kit (AK) subcomponent API frameworks in Oracle Sun Systems Products Suite. The affected line is the AK component prior to version 8.7.18. Exploitation requires network access and a high-privilege attacker, with no user interaction, to ...

CVE-2018-2917

CVE-2018-2917 affects the Sun ZFS Storage Appliance Kit (AK) within the Oracle Sun Systems Products Suite, specifically the API frameworks subcomponent. The vulnerability concerns versions prior to 8.7.18 and allows an unauthenticated attacker with network access through multiple protocols to com...

CVE-2018-2920

CVE-2018-2920 affects the Sun ZFS Storage Appliance Kit (AK) API frameworks subcomponent of Oracle Sun Systems Products Suite, with impact pre-8.7.19. A vulnerability in AK’s API frameworks could allow a low-privilege, network-accessible attacker to read, update, insert, or delete data and cause ...

CVE-2018-3057

CVE-2018-3057 affects the Sun ZFS Storage Appliance Kit (AK) in Oracle Sun Systems Products Suite (subcomponent: API frameworks). The affected version is prior to 8.7.18. The vulnerability enables a high-privilege attacker who can log on to the infrastructure where Sun ZFS Storage Appliance Kit (...

CVE-2018-2924: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2918: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoco...

CVE-2018-3057: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

PT-2018-15910

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions prior to 8.7.18 Description The issue affects the Sun ZFS Storage Appliance Kit AK component, specifically the API frameworks subcomponent. It allows an unauthenticated attacker with network access vi...

PT-2018-15909

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue affects the API frameworks subcomponent, allowing a high-privileged attacker with network access via multiple protocols to compromise the system. Successful attack...

PT-2018-1439

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue is related to insufficient access control in the API frameworks component of the Sun ZFS Storage Appliance Kit AK, allowing an unauthenticated attacker with networ...

PT-2018-1435

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue is related to insufficient access control in the API frameworks component of the Sun ZFS Storage Appliance Kit AK. This can be exploited by an attacker to gain ful...

PT-2018-1440

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.19 Description The issue is related to inadequate access control in the API frameworks component of the Sun ZFS Storage Appliance Kit AK. This can be exploited by a remote attacker to gain...

Bring Your Own Land (BYOL) – A Novel Red Teaming Technique

Introduction One of most significant recent developments in sophisticated offensive operations is the use of “Living off the Land” LotL techniques by attackers. These techniques leverage legitimate tools present on the system, such as the PowerShell scripting language, in order to execute attacks...

Crowbar Information Disclosure Vulnerability

crowdbar is a set of OpenStack installation frameworks for use in SUSE. A security vulnerability exists in the install-chef-suse.sh script in crowdbar, which stems from the program assigning insecure permissions when creating files with sensitive data. A local attacker could exploit the...

Apple will let users run iOS apps on macOS

Apple is making it easier for mobile developers to port their iOS apps to the next-generation macOS Mojave desktop platform—a major step in bringing the two platforms closer together. However, at the same time, the company straightforward denied the idea of merging the iPhone and Mac operating...

GandCrab Ransomware Found Hiding on Legitimate Websites

The GandCrab ransomware continues to virulently spread and adapt to shifting cyber-conditions, most recently crawling back into relevance on the back of several large-scale spam campaigns. What’s interesting is that GandCrab payload was found hiding on legitimate but compromised websites. These,...

AutoTTP - Automated Tactics Techniques & Procedures

Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers & so on can be tedious. I toyed with the idea of making it easier to script Empire or any frameworks/products/toolkits that provide APIs like...

CVE-2018-2863: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2018-15876

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions prior to 8.7.17 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system, potentially impacting additional products. Successful attacks can result i...