SSHD-Poison - A Tool To Get Creds Of Pam Based SSHD Authentication

sshd-poison is a tool to get creds of pam based sshd authentication, this is not the easiest way to do that you can create a pam module, or just add auth optional pamexec.so quiet exposeauthtok /bin/bash -c read,-r,x;echo,-e,"env\n$x"somefile in a service configuration, not even the stealthiest t...

openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-1079)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues : Security issues fixed : - CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. - CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in...

openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-295)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues : Security issues fixed : - CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. - CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in...

Design/Logic Flaw

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard...

CVE-2015-9282

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard...

CVE-2015-9282

The CVE-2015-9282 entry concerns the Grafana Pie Chart Panel plugin (up to 2019-01-02). The vulnerability is an XSS flaw in legend or tooltip data, enabling an attacker to influence a Grafana dashboard when the chart is embedded. The underlying cause is untrusted data being rendered in chart UI c...

CVE-2015-9282

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard...

PT-2019-7242

Name of the Vulnerable Software and Affected Versions Grafana Pie Chart Panel plugin versions prior to 2019-01-02 Description The issue allows an attacker to gain remote unauthenticated access to a Grafana dashboard when a chart is included. This is possible due to XSS via legend data or tooltip...

CVE-2015-9282: Improper Neutralization of Input During Web Page Generation

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard...

Google Patches Critical .PNG Image Bug

Google has patched a critical vulnerability in its current and legacy versions of its Android operating system, which allow an attacker to send a specially crafted Portable Network Graphics .PNG image file to a targeted device and execute arbitrary code. In its February Android Security Bulletin,...

[ASA-201901-10] go-pie: private key recovery

Arch Linux Security Advisory ASA-201901-10 ========================================== Severity: Medium Date : 2019-01-24 CVE-ID : CVE-2019-6486 Package : go-pie Type : private key recovery Remote : Yes Link : https://security.archlinux.org/AVG-859 Summary ======= The package go-pie before version...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution attacks. The vulnerability exists as Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14, 2015. This kernel vulnerability was fixed in...

Google DNS Service (8.8.8.8) Now Supports DNS-over-TLS Security

Almost every activity on the Internet starts with a DNS query, a key function of the Internet that works as an Internet's directory where your device looks up for the server IP addresses after you enter a human-readable web address e.g., thehackernews.com. Since DNS queries are sent in clear text...

flask-pie (>=0.0.2, <=0.1.0), negmas (>=0.1.36, <=0.2.25) +8 more potentially affected by CVE-2017-18342 via pyyaml (>=5.1.0b1, <=5.1.0b3)

pyyaml PYPI version =5.1.0b1, =0.0.2, =0.1.36, =0.2.2, =1.8.0, =0.3.8, =0.0.1, =0.0.41 - pybump 1.0.5 - pycmdparse 1.0.0 - yamldown 0.1.7 Source cves: CVE-2017-18342 Source advisory: GHSA-RPRW-H62V-C2W7...

flask-pie (>=0.0.2, <=0.1.0), negmas (>=0.1.36, <=0.2.25) +8 more potentially affected by CVE-2017-18342 via pyyaml (>=5.1.0b1, <=5.1.0b3)

pyyaml PYPI version =5.1.0b1, =0.0.2, =0.1.36, =0.2.2, =1.8.0, =0.3.8, =0.0.1, =0.0.41 - pybump 1.0.5 - pycmdparse 1.0.0 - yamldown 0.1.7 Source cves: CVE-2017-18342 Source advisory: OSV:GHSA-RPRW-H62V-C2W7...

pie-mag.com XSS vulnerability

Open Bug Bounty ID: OBB-714371 Description| Value ---|--- Affected Website:| pie-mag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

openSUSE Security Update : go1.10 (openSUSE-2018-1593)

This update for go1.10 fixes the following issues : Security vulnerabilities fixed : - CVE-2018-16873 bsc1118897: cmd/go: remote command execution during 'go get -u'. - CVE-2018-16874 bsc1118898: cmd/go: directory traversal in 'go get' via curly braces in import paths - CVE-2018-16875 bsc1118899:...

openSUSE Security Update : go1.11 (openSUSE-2018-1572)

This new package for go1.11 fixes the following issues: Security issues fixed : - CVE-2018-16873: Fixed a remote code execution in go get, when executed with the -u flag bsc1118897 - CVE-2018-16874: Fixed an arbitrary filesystem write in go get, which could lead to code execution bsc1118898 -...

Security update for go1.11 (important)

This new package for go1.11 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote code execution in go get, when executed with the -u flag bsc1118897 - CVE-2018-16874: Fixed an arbitrary filesystem write in go get, which could lead to code execution bsc1118898 -...

[ASA-201812-12] go-pie: multiple issues

Arch Linux Security Advisory ASA-201812-12 ========================================== Severity: High Date : 2018-12-18 CVE-ID : CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 Package : go-pie Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-835 Summary ======= The packa...