Ansible Agent Payload Deployer

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ansible Agent Payload Deployer', 'Description' = %q This exploit module creates an ansible module for deployment to nodes in the network. It...

Juniper’s Critical RCE Vulnerability Shakes Network Security

Summary: Juniper Networks has a critical remote code execution RCE vulnerability, CVE-2024-21591, which affects SRX Series firewalls and EX Series switches. This flaw enables attackers to trigger a Denial-of-Service condition and potentially execute remote code with root privileges. Threat Level ...

CVE-2024-20906

CVE-2024-20906 affects Oracle’s Integrated Lights Out Manager (ILOM) in the System Management component for versions 3–5. The flaw enables a highly privileged attacker with network access over ICMP to compromise ILOM, with attack success requiring user interaction and potentially affecting other ...

Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2024-06170)

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting vulnerability exists in...

EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2023-3022)

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showe...

EulerOS Virtualization 2.11.0 : libcap (EulerOS-SA-2023-2756)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause...

EulerOS Virtualization 3.0.6.0 : libX11 (EulerOS-SA-2023-3436)

According to the versions of the libX11 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that...

EulerOS Virtualization 2.9.0 : procps-ng (EulerOS-SA-2023-3106)

According to the versions of the procps-ng packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...

EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-2896)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size...

EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2024-1065)

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an...

EulerOS 2.0 SP11 : avahi (EulerOS-SA-2023-3262)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in Avahi. A reachable assertion exists in the avahiescapelabel function. CVE-2023-38470 Note that Tenable Network Securi...

EulerOS Virtualization 2.11.0 : sudo (EulerOS-SA-2023-2775)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.13 does not escape control characters in log messages. CVE-2023-28486 - Sudo before 1.9.13 does not escape control...

EulerOS Virtualization 2.9.1 : dhcp (EulerOS-SA-2024-1032)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it ha...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2023-2673)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroy...

EulerOS 2.0 SP11 : python-cryptography (EulerOS-SA-2023-2706)

According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions...

EulerOS 2.0 SP11 : libcap (EulerOS-SA-2023-2690)

According to the versions of the libcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to retur...

EulerOS 2.0 SP10 : python3 (EulerOS-SA-2023-3192)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects...

EulerOS Virtualization 2.9.0 : dhcp (EulerOS-SA-2024-1006)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it ha...

EulerOS 2.0 SP9 : libXpm (EulerOS-SA-2023-3312)

According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacke...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2023-2937)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. CVE-2023-26965 -...