6840 matches found
Fedora Update for perl-Email-Address-List FEDORA-2019-ef5551fcff
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Exposed: Instagram, OKCupid, Mumsnet All Face Data Concerns
It has once again been busy on the data privacy/exposure front as the week kicks off, with Instagram, dating site OKCupid and the UK’s powerhouse discussion site, Mumsnet, all making recent news. A report on GDPR breach notifications rounds out the latest. First up, Instagram users are apparently...
OSSEC/Wazuh ossec-authd Service Detection (TCP)
TCP based detection of a OSSEC/Wazuh ossec-authd service. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TeamPass <= 2.1.27 Information Disclosure Vulnerability
TeamPass is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass";...
exploit
This is an offensive tool for Exploits & Shellcodes. It is a repository of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. The repository is a collection of exploits, shellcodes, and papers gathered through direct...
Evaluating the GCHQ Exceptional Access Proposal
The so-called Crypto Wars have been going on for 25 years now. Basically, the FBI -- and some of their peer agencies in the UK, Australia, and elsewhere -- argue that the pervasive use of civilian encryption is hampering their ability to solve crimes and that they need the tech companies to make...
Schneider Electric U.motion Builder Software Detection (HTTP)
HTTP based detection of Schneider Electric U.motion Builder Software. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
sitesearch.legalandgeneral.com XSS vulnerability
Open Bug Bounty ID: OBB-713726 Description| Value ---|--- Affected Website:| sitesearch.legalandgeneral.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...
PT-2018-9536
Name of the Vulnerable Software and Affected Versions Artica Integria IMS versions prior to the version released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047 Description The issue is related to a weak password recovery mechanism in the password recovery process. This can result in...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
USN-3843-1 pixman vulnerability
It was discovered that pixman incorrectly handled the generalcompositerect function. A remote attacker could use this issue to cause pixman to crash, resulting in a denial of service, or possibly execute arbitrary code...
DEBIAN-CVE-2018-19965
An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service host OS crash because GP0 can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 aka Meltdown mitigation...
PT-2018-13658
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for XSS via the panel/configuration/general/ endpoint, specifically through the SITE TITLE parameter. Recommendations For Subrion CMS version 4.2.1, update the software to a version that...
CVE-2018-16631: Improper Neutralization of Input During Web Page Generation
Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter...
Schneider Electric PLC - Session Calculation Authentication Bypass Exploit
Exploit for hardware platform in category web applications ! /usr/bin/env python ''' Copyright 2018 Photubiasc Exploit Title: Schneider Session Calculation - CVE-2017-6026 Date: 2018-09-30 Exploit Author: Deneut Tijl Vendor Homepage: www.schneider-electric.com Software Link:...
Phoenix Contact mGuard Device Manager Detection (Windows SMB Login)
SMB login-based detection of Phoenix Contact mGuard Device Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2018:3921-1)
java-171-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 bsc1116574 : Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932...
Threat predictions for industrial security in 2019
Kaspersky Security Bulletin: Threat Predictions for 2019 Cryptocurrency threat predictions for 2019 Cyberthreats to financial institutions 2019: overview and predictions The past few years have been very intense and eventful when it comes to incidents affecting the information security of...
