U.S. Dept Of Defense: phpinfo() disclosure info

hi security team i found subdoamins avalibale file phpinfo PoC:- https://█████████/phpinfo.php Impact An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version. •Details of the PHP configuration. •Internal IP addresses. •Server environment variables. •Loaded PHP...

Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work

The Transportation Safety Authority TSA has become the latest federal agency to ban the use of TikTok among its employees based on national-security fears over how ByteDance, the Beijing-based company that owns the app, uses the data collected by it. Some TSA employees have used the app to create...

Default configuration

When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that...

CVE-2019-6193

An information disclosure vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes...

CVE-2019-6193

An information disclosure vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes...

CVE-2013-2683

Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information...

Information disclosure

Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information...

CVE-2013-2683

Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information...

CVE-2013-2676

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information...

Information disclosure

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information...

Twitter API Abused to Uncover User Identities

Twitter said that malicious actors, with potential ties to state-sponsored groups, were abusing a legitimate function on its platform to unmask the identity of users. The social media giant said that on Dec. 24, 2019, it discovered a large network of fake accounts abusing a legitimate API...

CVE-2013-2676

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information...

Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware

CVE-2019-19781IOCs IOCs for CVE-2019-19781 citrixhoneypotnsl...

Siemens SINEMA Server

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINEMA Server Vulnerability: Incorrect Privilege Assignment 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with a valid session, with...

AttackSurfaceMapper - A Tool That Aims To Automate The Reconnaissance Process

Attack Surface Mapper is a reconnaissance tool that uses a mixture of open source intellgence and active techniques to expand the attack surface of your target. You feed in a mixture of one or more domains, subdomains and IP addresses and it uses numerous techniques to find more targets. It...

The Great $50M African IP Address Heist

A top executive at the nonprofit entity responsible for doling out chunks of Internet addresses to businesses and other organizations in Africa has resigned his post following accusations that he secretly operated several companies which sold tens of millions of dollars worth of the increasingly...

CVE-2013-3314

The Loftek Nexus 543 IP Camera allows remote attackers to obtain 1 IP addresses via a request to getrealip.cgi or 2 firmware versions ui and system, timestamp, serial number, p2p port number, and wifi status via a request to getstatus.cgi...

Cross site request forgery (csrf)

The Loftek Nexus 543 IP Camera allows remote attackers to obtain 1 IP addresses via a request to getrealip.cgi or 2 firmware versions ui and system, timestamp, serial number, p2p port number, and wifi status via a request to getstatus.cgi...

CVE-2013-3314

CVE-2013-3314 affects the Loftek Nexus 543 IP Camera. The issue allows remote attackers to disclose sensitive device information via specific CGI endpoints: an attacker can obtain IP addresses with a request to get_realip.cgi or firmware versions, timestamp, serial number, p2p port, and wifi stat...

CVE-2013-3314

The Loftek Nexus 543 IP Camera allows remote attackers to obtain 1 IP addresses via a request to getrealip.cgi or 2 firmware versions ui and system, timestamp, serial number, p2p port number, and wifi status via a request to getstatus.cgi...