9512 matches found
New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
Executive Summary In August 2020, a U.S.-based entity uploaded a new backdoor that we have named SUNSHUTTLE to a public malware repository. SUNSHUTTLE is a second-stage backdoor written in GoLang that features some detection evasion capabilities. Mandiant observed SUNSHUTTLE at a victim compromis...
Zen Cart 1.5.7b Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit write payload in database and trig to command a bug in an zencart v1.5.7b web application class MetasploitModule 'zencart authenticated remote code executio...
VMware vCenter Server 7.0 Arbitrary File Upload
Exploit Title: VMware vCenter Server 7.0 - Unauthenticated File Upload Date: 2021-02-27 Exploit Author: Photubias Vendor Advisory: 1 https://www.vmware.com/security/advisories/VMSA-2021-0002.html Version: vCenter Server 6.5 7515524. File name CVE-2021-21972.py written by tijldotdeneutathowestdotb...
CVE-2021-24085
Microsoft Exchange Server Spoofing Vulnerability Rapid7 Analysis Threat status: Impending CVE-2020-24085 is a Microsoft Exchange Server spoofing vulnerability released as part of Microsoft's February Patch Tuesday advisories. The vulnerability allows remote attackers to escalate privileges on...
EulerOS 2.0 SP2 : squid (EulerOS-SA-2021-1363)
According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack c...
PT-2021-27328
Name of the Vulnerable Software and Affected Versions: mumble versions prior to 1.3.4 Description: The issue is caused by allowing non http/https URL schemes in the public server list. This has been fixed in the update to version 1.3.4. Other fixes include handling of invalid packet sizes,...
Fedora 33 : kiwix-desktop (2021-aa347d2b99)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-aa347d2b99 advisory. - Always use HTTPS for the catalog downloads. FEDORA-2021-aa347d2b99 Note that Nessus has not tested for this issue but has instead relied only on the...
Amazon Linux 2 : thunderbird (ALAS-2021-1603)
The version of thunderbird installed on the remote host is prior to 78.7.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1603 advisory. The Mozilla Foundation Security Advisory describes these flaws as: During the plaintext phase of the STARTTLS...
Oracle Linux 8 : thunderbird (ELSA-2021-0298)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0298 advisory. 78.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.7.0-1 - Update to 78.7.0 Tenable has extracted...
CVE-2020-29024
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
Session fixation
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
CVE-2020-29024 Missing HtppOnly and Secure flags
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
CVE-2020-29024
The CVE-2020-29024 issue affects Secomea GateManager (GoToAppliance) prior to version 9.3, where cookies in HTTPS sessions can be exposed due to missing Secure attribute. This could allow an attacker to access sensitive cookies. The vulnerability is caused by insecure cookie handling in GoToAppli...
Moderate: Red Hat Security Advisory: nss security and bug fix update
An update for nss is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
PT-2021-27327
Name of the Vulnerable Software and Affected Versions: mumble versions prior to 1.3.4 Description: The issue is caused by allowing non http/https URL schemes in the public server list. This has been fixed in the update to version 1.3.4. Other fixes include handling of invalid packet sizes,...
openSUSE Security Update : MozillaFirefox (openSUSE-2021-222)
This update for MozillaFirefox fixes the following issues : - Firefox Extended Support Release 78.7.0 ESR MFSA 2021-04, bsc1181414 - CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests - CVE-2021-23954: Fixed a type confusion when using logical assignment operator...
PT-2021-11631
Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.3 Description: The issue affects Secomea GateManager, where a Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in the GoToAppliance could allow an attacker to gain access to...
CVE-2020-29024: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
pfSense < 2.4.4-p3 Multiple Vulnerabilities
According to its self-reported version number, the remote pfSense install is a version prior to 2.4.4-p3. It is, therefore, affected by multiple vulnerabilities, including the following: - In pfSense 2.4.41, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsiste...
