1921 matches found
CVE-2020-35189
The official kong docker images before 1.0.2-alpine Alpine specific contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...
Default credentials
The official kong docker images before 1.0.2-alpine Alpine specific contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...
CVE-2020-35189
The official kong docker images before 1.0.2-alpine Alpine specific contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...
CVE-2020-35189
CVE-2020-35189 affects Kong Docker images prior to 1.0.2-alpine. The issue is a blank root password in the container, which could allow a remote attacker to obtain root access on systems running the affected Kong Docker container. Publicly available connected sources corroborate that the vulnerab...
PT-2020-17279 · Kong · Kong
Name of the Vulnerable Software and Affected Versions: Kong Docker images versions prior to 1.0.2-alpine Description: The issue concerns a blank password for a root user in the official Kong Docker images. This could allow a remote attacker to achieve root access with a blank password on systems...
CVE-2020-35189: Missing Authentication for Critical Function
The official kong docker images before 1.0.2-alpine Alpine specific contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...
Docker Image kong 访问控制错误漏洞
Docker is an open source application container engine from the American company Docker. It supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment and upgrade of applications through...
Cayman Islands Bank Records Exposed in Open Azure Blob
A Cayman Island investment firm has removed years of backups, which up until recently were easily available online thanks to a misconfigured Microsoft Azure blob. The blob’s single URL led to vast stores of files including personal banking information, passport data and even online banking PINs —...
Metasploit Wrap-Up
Exploiting weak configurations Community contributor Graeme Robinson added two modules targeting insecurely configured API's, both of which lead to remote code execution. The first module exploits a lack of access control in Apache NiFi, which allows for the creation of an ExecuteProcess processo...
CVE-2020-28948
creationtimestamp| type| source ---|---|--- 2020-11-27 06:43:35+00:00| seen| https://t.me/cKure/2991 2020-11-30 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=530 2020-12-03 06:54:15+00:00| seen| Telegram/Guk8DuU3shklMFMRI0YLGr6ZXGDXJelP33OTSQyPGBX5w 2020-12-03...
Kong Gateway Admin API Remote Code Execution
frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kong Gateway Admin API Remote Code Execution', 'Description' = ' This module uses the Kong admin API to create a route...
Kong Gateway Admin API Remote Code Execution Exploit
This Metasploit module uses the Kong admin API to create a route and a serverless function plugin that is associated with the route. The plugin runs Lua code and is used to run a system command using os.execute. After execution the route is deleted, which also deletes the plugin...
Onboarding During A Pandemic: Can It Really Work? New Joiner, Lily Nguyen, Shares Her Experience.
I recently joined the Sales Development APAC team, looking after the Vietnam, Thailand and Hong Kong markets. I'd already had a great impression of Akamai's culture from my interview rounds. But how would the onboarding work? I'd been looking forward to meeting new colleagues in an office...
Kong Gateway Admin API Remote Code Execution
This module uses the Kong admin API to create a route and a serverless function plugin that is associated with the route. The plugin runs Lua code and is used to run a system command using os.execute. After execution the route is deleted, which also deletes the plugin. Module Options msf use...
APT41 Operatives Indicted as Sophisticated Hacking Activity Continues
UPDATE Five alleged members of the APT41 threat group have been indicted by a federal grand jury, in two separate actions that were unsealed this week. Meanwhile, the Department of Treasury also imposed sanctions on individuals and organizations associated with Iran-linked APT39. APT41 a.k.a...
Chinese Hackers Escalate Attacks Against India and Hong Kong Amid Tensions
An emerging threat actor out of China has been traced to a new hacking campaign aimed at government agencies in India and residents of Hong Kong intending to steal sensitive information, cybersecurity firm Malwarebytes revealed in the latest report shared with The Hacker News. The attacks were...
Chinese Hackers Escalate Attacks Against India and Hong Kong Amid Tensions
An emerging threat actor out of China has been traced to a new hacking campaign aimed at government agencies in India and residents of Hong Kong intending to steal sensitive information, cybersecurity firm Malwarebytes revealed in the latest report shared with The Hacker News. The attacks were...
Chinese APT group targets India and Hong Kong using new variant of MgBot malware
This blog post was authored by Hossein Jazi and Jérôme Segura On July 2, we found an archive file with an embedded document pretending to be from the government of India. This file used template injection to drop a malicious template which loaded a variant of Cobalt Strike. One day later, the sam...
VPN firm that claims zero logs policy leaks 20 million user logs
By Sudais Asif The VPN company in the discussion is a Hong Kong-based UFO VPN. This is a post from HackRead.com Read the original post: VPN firm that claims zero logs policy leaks 20 million user logs...
hongkong.intensjobs.com Cross Site Scripting vulnerability OBB-1225425
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...