The VerifyPopServerConnection resource was vulnerable to SSRF - CVE-2018-13404

The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from...

Remote Code Execution in spark-core

In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute co...

Unified hosts File With Base Extensions: hosts

Extending and consolidating hosts files from several well-curated sources like adaway.org, mvps.org, malwaredomainlist.com, someonewhocares.org, and potentially others. You can optionally invoke extensions to block additional sites by category. The unified hosts file is extensible. Extensions are...

Authentication flaw

In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute co...

CVE-2018-17190

CVE-2018-17190 affects Apache Spark’s standalone resource manager. A specially crafted request can cause the master to execute code on worker nodes, even though the master is not intended to run user code. This vulnerability is described as not affecting standalone clusters with authentication en...

MuddyWater expands operations

Summary MuddyWater is a relatively new APT that surfaced in 2017. It has focused mainly on governmental targets in Iraq and Saudi Arabia, according to past telemetry. However, the group behind MuddyWater has been known to target other countries in the Middle East, Europe and the US. We recently...

Microsoft Publisher: Disable UI Extending from Documents and Templates

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officenouiextendingpublisher.nasl 12129 2018-10-26 13:57:15Z cfischer $ Check value for Disable UI extending from documents and templates Publisher Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable Opt-in Wizard on first run

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeoptinwizard.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Opt-in Wizard on first run Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft InfoPath: Disable UI Extending from Documents and Templates

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officenouiextendinginfopath.nasl 12129 2018-10-26 13:57:15Z cfischer $ Check value for Disable UI extending from documents and templates InfoPath Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable user name and password

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officedisableusernamepasswd.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable user name and password Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Office: Restrict File Download

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officerestrictfiledownload.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Restrict File Download Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

Microsoft Office: Bind to object

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officebindtoobject.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Bind to object Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Microsoft Office: Navigate URL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officenavigateurl.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Navigate URL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Microsoft Office: Add-on Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeaddonmanagement.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Add-on Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Microsoft Office: Local Machine Zone Lockdown Security

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officelockdownsecurity.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Local Machine Zone Lockdown Security Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Office: Object Caching Protection

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeobjectcachingprotection.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Object Caching Protection Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Microsoft Office: Restrict ActiveX Install

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeactivexinstall.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Restrict ActiveX Install Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Office: Saved from URL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officesavedfromurl.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Saved from URL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Microsoft Office: Scripted Window Security Restrictions

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officescriptedwindow.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Scripted Window Security Restrictions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Windows Defender AV: Process Exclusions

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavprocessexclusions.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Process Exclusions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...