CVE-2023-48310 Ability to DoS the testing infrastructure by overwriting files

TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name and even without. A log file is created at...

CVE-2023-48310 Ability to DoS the testing infrastructure by overwriting files

TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name and even without. A log file is created at...

CVE-2023-48310

CVE-2023-48310 affects TestingPlatform prior to version 2.1.1, where unfiltered user input enables creation of log files (even without a host name) and permits arbitrary CIDR scans (e.g., 0.0.0.0/0). Logs are created with root ownership, and existing files can be rendered useless, contributing to...

CVE-2023-48310

TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name and even without. A log file is created at...

CVE-2023-48310: Improper Input Validation

TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name and even without. A log file is created at...

PT-2023-30773

Name of the Vulnerable Software and Affected Versions TestingPlatform versions prior to 2.1.1 Description The issue arises from incorrect filtering of user input, allowing Nmap options to be accepted. This includes the option to create log files at a specified location, potentially leading to...

Important Photon OS Security Update - PHSA-2023-4.0-0517

Updates of 'nmap', 'squid' packages of Photon OS have been released...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j Vulnerability - CVE-2021-44228 :greenbook: - Int...

buildah security update

1.31.3-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 1:1.31.3-1 - update to https://github.com/containers/buildah/releases/tag/v1.31.3 - Related: 2176063 1:1.31.2-1 - update to https://github.com/containers/buildah/releases/tag/v1.31.2 - Related: 2176063...

Amazon Linux 2 : nmap (ALAS-2023-2333)

The version of nmap installed on the remote host is prior to 6.40-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2333 advisory. Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application...

Low: nmap

Issue Overview: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service. CVE-2018-15173 Affected Packages: nmap Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Exploit for Command Injection in Contec Solarview_Compact_Firmware

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passw...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0036

Updates of 'libXi', 'nmap', 'binutils', 'lua' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0036

Updates of 'libXi', 'lua', 'binutils', 'nmap' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-3.0-0601

Updates of 'nmap', 'crash', 'openjdk11' packages of Photon OS have been released...

Exploit for Code Injection in Apache Rocketmq

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023...

GHSA-HGV6-W7R3-W4QW Kyverno vulnerable due to usage of insecure cipher

Summary Insecure 3DES ciphers are used which may lead to exploitation of the Sweet32 vulnerability. Specifically, the ciphers TLSECDHERSAWITH3DESEDECBCSHA secp256r1 and TLSRSAWITH3DESEDECBCSHA rsa 2048 are allowed. See CVE-2016-2183. This is fixed in Kyverno v1.9.5 and v1.10.0 and no known users...

Kyverno vulnerable due to usage of insecure cipher

Summary Insecure 3DES ciphers are used which may lead to exploitation of the Sweet32 vulnerability. Specifically, the ciphers TLSECDHERSAWITH3DESEDECBCSHA secp256r1 and TLSRSAWITH3DESEDECBCSHA rsa 2048 are allowed. See CVE-2016-2183. This is fixed in Kyverno v1.9.5 and v1.10.0 and no known users...

nmap bug fix and enhancement update

An update is available for nmap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.2...