UPDATE: Sysdig Falco v0.9.0

PenTestIT RSS Feed My last post from a almost nice months ago, was about an open source behavorial activity monitor which has container support. It was updated and we now have update – the Sysdig Falco v0.9.0! This release fixes a couple of driver and OSX build incompatibility issues. What is...

PT-2018-5735

Name of the Vulnerable Software and Affected Versions: Qualcomm Android for MSM versions prior to security patch level 2018-04-05 Firefox OS for MSM versions prior to security patch level 2018-04-05 QRD Android versions prior to security patch level 2018-04-05 Description: The issue arises when t...

ModSecurity For Nginx Use-After-Free

Hey, TL;DR: UAF in a "non-release" version of ModSecurity for Nginx. !RCE|DoS, no need to panic. Plus some old and even older exploitation vectors. / 1. Use-After-Free UAF / During one of the engagements my team tested a WAF running in production Nginx + ModSecurity + OWASP Core Rule Set 123. In...

March 22, 2018—KB4089848 (OS Build 16299.334)

None None...

Simple IOC and Incident Response Scanner: Loki

LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...

Information Security Preparedness Tool: Metta

Metta is an open-source information security preparedness tool for adversarial simulation. As an emerging concept, the industry has yet to settle on a definitive definition of adversarial simulation, but it involves simulating components of targeted attacks in order to test both an organization’s...

CentOS 7 : 389-ds-base (CESA-2018:0414)

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Microsoft Office - Composite Moniker Remote Code Execution Exploit

Exploit for windows platform in category local exploits What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using the...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20180306)

Security Fixes : - 389-ds-base: remote Denial of Service DoS via search filters in SetUnicodeStringFromUTF8 in collate.c CVE-2018-1054 - 389-ds-base: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c CVE-2017-15135 Bug Fixes : - Previously, if an administrato...

PT-2018-10028 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.15.7 Description: The netfilter subsystem in the Linux kernel mishandles the case of a rule blob that contains a jump but lacks a user-defined chain, which allows local users to cause a denial of service NULL...

Vulnerability Spotlight: Dovecot out-of-bounds Read Vulnerability

Overview Today, Cisco Talos is disclosing a single out-of-bounds read vulnerability in the Dovecot IMAP server. Dovecot is a popular internet message access protocol, or IMAP, server with performance and security-oriented design. It is a popular choice for robust email servers. In accordance with...

Generic Signature Format for SIEM Systems: Sigma

Sigma is a generic and open signature format that allows you to describe relevant log events in a straight forward manner. The rule format is very flexible, easy to write and applicable to any type of log file. The main purpose of this project is to provide a structured form in which researchers ...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

CVE-2018-5967 affects Netis WF2419 devices (v2.2.36123) where the Description field on the Bandwidth Control Rule Settings page is vulnerable to XSS. The root cause is inadequate filtering of user-supplied data in that Description parameter, allowing a remote attacker to inject script/HTML into t...

Netis WF2419 Cross-Site Scripting Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

CVE-2018-5967: Improper Neutralization of Input During Web Page Generation

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

PT-2018-17254

Name of the Vulnerable Software and Affected Versions: Netis WF2419 version 2.2.36123 Description: The issue allows for XSS via the Description parameter on the "Bandwidth Control Rule Settings" page. Recommendations: For Netis WF2419 version 2.2.36123, avoid using the Description parameter in th...

Vulnerability Spotlight: Tinysvcmdns Multi-label DNS DoS Vulnerability

Overview Talos is disclosing a single NULL pointer dereference vulnerability in the tinysvcmdns library. Tinysvcmdns is a tiny MDNS responder implementation for publishing services. This is essentially a mini and embedded version of Avahi or Bonjour. Details Discovered by Claudio Bozzato, Yves...

Microsoft Office - Composite Moniker Remote Code Execution

Microsoft Office - Composite Moniker Remote Code Execution What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using th...

Microsoft Office - 'Composite Moniker Remote Code Execution

What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using the primitive that the vulnerability provides. Download:...