Microsoft Patch Tuesday, March 2022 Edition

Microsoft on Tuesday released software updates to plug at least 70 security holes in its Windows operating systems and related software. For the second month running, there are no scary zero-day threats looming for Windows users, and relatively few "critical" fixes. And yet we know from experienc...

CVE-2022-24459: Undefined Security Weakness

Windows Fax and Scan Service Elevation of Privilege Vulnerability...

CVE-2022-0758

Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration component of the tool. With this vulnerability an attacker could pass literal values as the test credentials, providing the opportunity for a potential XSS...

ADC Vulnerability: pwcount Cookie Missing HTTP Only Flag

Customer is failing PCI scan because the ADC Gateway server pwcount cookie is not showing with HTTP only flag set...

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

ScreenShots Install chmod +x install.sh ./install.sh as root Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports like nmap -t: Set Timeout in milliseconds EXAMPLES go run...

Windows Fax and Scan Service Elevation of Privilege Vulnerability

...

PT-2022-1975 · Microsoft · Windows Fax/Scan Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax and Scan Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Fax and Scan Service, which can be exploited to elevate privileges. This allows an attacker to affe...

InsightVM Scan Engine: Understanding MAC Address Discovery

Written in collaboration with Jimmy Cancilla When scanning an asset, one key piece of data that the InsightVM Scan Engine collects is the MAC address of the network interface used during the connection. The MAC address is one of several attributes used by the Security Console to perform asset...

OESA-2022-1566 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

Cross site scripting

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability...

CVE-2022-0429

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin versions prior to 8.9.6 is vulnerable to an unauthenticated stored Cross-Site Scripting (XSS) vulnerability. The issue occurs because the $url variable is not properly sanitized before being used as an attribute in the Activity tab...

CVE-2022-0429: Improper Neutralization of Input During Web Page Generation

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability...

PT-2022-36859

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a null-dereference read crash. The crash occurs in the following functions: cl finish hash, hash imptbl, scan pe imp...

Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947-RcePOC Batch URL detection for Spring-Clou...

SUSE SLES12: kernel-livepatch-4_12_14-150_69-default / etc (SUSE-SU-2022:0667-1)

The remote SUSE Linux SLES12 / SLES15 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0667-1 advisory. This update for the Linux Kernel 4.12.14-15069 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a...

CVE-2021-44747

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

JetBrains TeamCity XML External Entity Handling Vulnerability

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic. The tool provides continuous unit testing, code quality analysis, and build issue analysis reporting.A security vulnerability exists in JetBrains TeamCity, which stems from the...

PT-2022-36854

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as spgetcc, gs scan token, and gs interpret. No...

Let’s Get Under the Hood of Imperva Snapshot

A stress-free guide for the prudent cloud operator With minimal setup, Imperva Snapshot enables you to immediately start your in-depth Amazon Web Services AWS RDS database assessment. With no prior training required, cloud operators can use this useful tool to pinpoint deficiencies in their...

Backdoor.Win32.FTP.Ics Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/584bc06128469423f9e50e8a359d18acC.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Ics Vulnerability: Port Bounce Scan MITM Description: The malware listens on TCP...