4767 matches found
Detect FritzFrog and Other Malware Infections with Inventory Data
Recently, Guardicore researchers discovered a new type of malware called “FritzFrog,” which targets multiple industry verticals, including government, finance, and healthcare. It employs brute-forcing SSH credentials as an initial attack vector, uses a proprietary P2P protocol to efficiently...
CVE-2020-23836
A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...
CVE-2020-23836
A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...
CVE-2020-23836
A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...
CVE-2020-23836
CVE-2020-23836 describes a CSRF vulnerability in OSWAPP Warehouse Inventory System (OSWA-INV) in edit_user.php up to 2020-08-10 that allows an authenticated admin visiting a third-party site to change the admin password. CVSS v3.1 vectors: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with base score 8.8 (...
PT-2020-15560
Name of the Vulnerable Software and Affected Versions Spiceworks versions prior to 7.5.00107 Description The issue affects the Custom Groups function, where any name typed in is vulnerable to stored XSS. This occurs because the input is displayed on the http://127.0.0.1/inventory/groups/ page...
AWS Recon - Multi-threaded AWS Inventory Collection Tool With A Focus On Security-Relevant Resources And Metadata
A multi-threaded AWS inventory collection tool. The creators of this tool have a recurring need to be able to efficiently collect a large amount of AWS resource attributes and metadata to help clients understand their cloud security posture. There are a handful of tools e.g. AWS Config,...
klowdenmann.inventory.gallery Cross Site Scripting vulnerability OBB-1264883
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Automated Discovery and Assessment of PaaS Databases with Lambda Service for Qualys Policy Compliance
In the last several years, Platform as a Service PaaS solutions have evolved and matured. As organizations have focused on digital transformation, there has been a major shift towards adopting PaaS solutions driven by benefits including scalability, agility, faster deployment, and cost-effective...
DAGOBAH - Open Source Tool To Generate Internal Threat Intelligence, Inventory & Compliance Data From AWS Resources
Dagobah is an open source tool written in python to automate the internal threat intelligence generation, inventory collection and compliance check from different AWS resources. Dagobah collects information and save the state into an elasticsearch index. Dagobah runs into the a LAMBDA and looks a...
The vulnerability of the Inventory Integration component of the Oracle Hospitality Reporting and Analytics software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Inventory Integration component of the Oracle Hospitality Reporting and Analytics software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Warehouse Inventory System Cross-Site Request Forgery Vulnerability
Warehouse Inventory System is an open source inventory management system based on php and mysql . Warehouse Inventory System suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to send unintended requests to the server via an affected client...
Continuous Monitoring and Beyond
As security professionals, we struggle with the high volume of data we need to sort through while trying to parse out the critical alerts that are important for us to take immediate action upon. Being at the forefront of innovation for the past 20 years, Qualys offers 20 plus solutions which all...
Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)
Exploit Title: Warehouse Inventory System 1.0 - Cross-Site Request Forgery Change Admin Password Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: 2020-08-09 Vendor Homepage: https://oswapp.com Software Link: https://github.com/siamon123/warehouse-inventory-system/archive/master.zip...
Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password) Exploit
Exploit for php platform in category web applications Exploit Title: Warehouse Inventory System 1.0 - Cross-Site Request Forgery Change Admin Password Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Vendor Homepage: https://oswapp.com Software Link:...
CVE-2020-14594
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Inventory Integration. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure whe...
CVE-2020-14594
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Inventory Integration. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure whe...
Buffer overflow
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Inventory Integration. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure whe...
CVE-2020-14594
CVE-2020-14594 affects Oracle Hospitality Reporting and Analytics (Inventory Integration) for the 9.1.0 version. The vulnerability is described as exploitable with local access, with HIGH confidentiality, integrity, and availability impacts, requiring user interaction and enabling takeover of Ora...