MSSQL NTLM Info

Performs TDS Login7 with NTLM SSPI negotiate and parses the Type-2 challenge NSE ms-sql-ntlm-info. !/usr/bin/env python3 -- coding: utf-8 -- """MSSQL NTLM info NSE ms-sql-ntlm-info.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

MAL-2026-6086 Malicious code in ai-chat-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a12d35a8713a8f63eaf342901214a7f53fa396b9ee8218d246e5e0db7b6318 collect.js performs system reconnaissance and exfiltration to a hardcoded attacker-controlled host. The script imports childprocess, os, fs, http, an...

GHSA-VJ2J-6G3W-4662 Silverstripe Missing CSRF protection in login form

LoginForm calls disableSecurityToken, which causes a "shared host domain" vulnerability: http://stackoverflow.com/a/15350123...

Hubs Cloud Cross-site Scripting Vulnerabilities

Hubs Cloud is an application for the Hubs community. All the AWS resources needed to host your own immersive space from your company or organization's own account can be created and managed. Hub Cloud has a security vulnerability that allows users to download shared content, specifically HTML and...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:3159-1)

"This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.9-11 October 2020 CPU, bsc1177943 - New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector - Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling +...

Cisco Linksys E1200 Router Set Host Domain Name

The vulnerability of the sethostdomainname function libshared.so in Cisco Linksys E1200 and Cisco Linksys E250 router microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability can allow ...