13685 matches found
Debian DLA-1818-1 : dbus security update
Joe Vennix discovered an authentication bypass vulnerability in dbus, an asynchronous inter-process communication system. The implementation of the DBUSCOOKIESHA1 authentication mechanism was susceptible to a symbolic link attack. A local attacker could take advantage of this flaw to bypass...
Fedora 29 : 2:podman (2019-b66d704846)
do not install /usr/libexec/crio - conflicts with crio ---- Resolves: 1715668 - CVE-2019-10152 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
This week, MSRC confirmed the presence of an active Linux worm leveraging a critical Remote Code Execution RCE vulnerability, CVE-2019-10149, in Linux Exim email servers running Exim version 4.87 to 4.91. Microsoft Azure infrastructure and Services are not affected; only customer’s Linux IaaS...
Fedora 30 : js-jquery-jstree (2019-38abc6b897)
Update to 3.3.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
Fortinet FortiOS (Mac OS X) < 5.6.11, 6.0.x < 6.0.5 SSL VPN Heap Buffer Overflow (FG-IR-18-388) (deprecated)
The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-388.nasl plugin ID 125887 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-388.nasl include"compat.inc"; if description scriptid12589...
CVE-2019-11119
The CVE-2019-11119 issue affects Intel RAID Web Console 3 for Windows, version 4.186 and earlier. It stems from insufficient session validation in the service API, potentially allowing an unauthenticated user to escalate privileges via network access. Red Hat and Intel advisories confirm the vuln...
Fedora 29 : kernel / kernel-headers (2019-83858fc57b)
Update to v5.1.8 ---- Update to v5.1.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
Fedora 30 : kernel / kernel-headers (2019-c03eda3cc6)
Update to v5.1.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
Fedora 30 : python-django (2019-57a4324120)
update to 2.1.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...
CVE-2019-6580
CVE-2019-6580 affects Siemens Siveillance VMS: 2017 R2 (< v11.2a), 2018 R1 (< v12.1a), 2018 R2 (< v12.2a), 2018 R3 (< v12.3a), and 2019 R1 (
CVE-2019-6581
Siemens Siveillance VMS is affected by CVE-2019-6581 (Incorrect User Management/Improper Authorization). Affected versions include 2017 R2 prior to v11.2a, 2018 R1 prior to v12.1a, 2018 R2 prior to v12.2a, 2018 R3 prior to v12.3a, and 2019 R1 prior to v13.1a. An attacker with network access to Po...
Microsoft Remote Desktop Connection Installed
Microsoft Remote Desktop Connection also known as Remote Desktop Protocol or Terminal Services Client is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid125835; scriptversion"1.3";...
SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2019:1461-1)
This update for php7 fixes the following issues : Security issues fixed : CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory...
SUSE SLES11 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2019:14076-1)
This update for gstreamer-010-plugins-base fixes the following issues : Security issues fixed : CVE-2017-5837: Fixed a floating point exception in gstriffcreateaudiocaps bsc1024076. CVE-2017-5844: Fixed a floating point exception in gstriffcreateaudiocaps bsc1024079. CVE-2019-9928: Fixed a...
Fedora 30 : 2:podman (2019-0937bbf558)
Resolves: 1715668 - CVE-2019-10152 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Netwo...
CVE-2019-12153
RealObjects PDFreactor (before 10.1.10722) contains a flaw in its HTML parser that fails validation, enabling server-side request forgery (SSRF) by supplying malicious HTML content. The issue can allow an attacker to access network or file resources from the server. Public references indicate the...
Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (104 bytes)
;Title: Linux/x8664 - Bind 4444/TCP Shell /bin/sh 104 bytes ;Author: Aron Mihaljevic ;Architecture: Linux x8664 ;Shellcode Length: 104 bytes ;github = https://github.com/STARRBOY ;test shellcode = after you run the shellcode, open another terminal and run "netcat -vv 0.0.0.0 4444"...
Microsoft Office SharePoint CVE-2019-1032 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
CVE-2019-11877
XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID...
Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) #Shellcode (131 bytes)
Exploit for linux/x86-64 platform in category shellcode ;Title: Linux/x8664 - Bind 4444/TCP Shell /bin/sh ;Author: Aron Mihaljevic ;Architecture: Linux x8664 ;Shellcode Length: 131 bytes ;github = https://github.com/STARRBOY ;test shellcode = after you run the shellcode, open another terminal and...