CVE-2019-20000

CVE-2019-20000 affects BullGuard Premium Protection 20.0.371.8. The vulnerability is a TOCTOU issue in the malware scan function that allows a symbolic-link attack, enabling privileged files to be deleted. Connected sources confirm the issue across Red Hat and CVE records, with no explicit exploi...

PT-2019-20131

Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...

CVE-2019-20008: Improper Neutralization of Input During Web Page Generation

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

PT-2019-16042

Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...

PT-2019-16041

Name of the Vulnerable Software and Affected Versions BullGuard Premium Protection version 20.0.371.8 Description The issue concerns a Time-of-Check-to-Time-of-Use TOCTOU problem in the malware scan function, which can be exploited through a symbolic link attack. This allows an attacker to delete...

Stripo Inc: SSRF leads to internal port scan

SSRF Vulnerbility leads to internal port scan. From the response time, we can confirm the internal IP exist/accessible or not...

The vulnerability of the adis_update_scan_mode() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the adisupdatescanmode function drivers/iio/imu/adisbuffer.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Exploit for CVE-2013-0422

K8tools 20191130 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 扫描工具 Ladon 5.7 大型内网渗透扫描神器内置40个功能,支持Cobalt Strike + 扫描工具 K8Cscan5.4 大型内网渗透扫描器内置30个功能,支持Cobalt Strike +...

PT-2019-6406

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34 Description The issue is related to a flaw in the bfd pef scan start address function of bfd/pef.c in binutils, which could allow an attacker to cause a NULL pointer dereference by submitting a crafted file to b...

php:php-fuzz-exif: Use-of-uninitialized-value in exif_process_TIFF_in_JPEG

Detailed Report: https://oss-fuzz.com/testcase?key=5631203063627776 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-exif Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: exifprocessTIFFinJPEG exifscanJPEGheader...

Citrix SD-WAN Center trace_route Unauthenticated Remote Command Injection

The remote Citrix SD-WAN Center is affected by a remote command injection vulnerability due to improper sanitization of user-supplied input in the traceroute action of DiagnosticController. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP request, to execute...

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client allows a hacker to execute arbitrary code due to errors in memory object handling.

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client is related to errors in processing objects in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Go passwordless to strengthen security and reduce costs

We all know passwords are inherently unsecure. They’re also expensive to manage. Users struggle to remember them. It’s why we’re so passionate about eliminating passwords entirely. Passwordless solutions, such as Windows Hello, FIDO2 security keys, and the Microsoft Authenticator app, provide mor...

Cisco NX-OS Software Command Injection (cisco-sa-20190515-nxos-cmdinj-1795)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to a specific CLI command on an affected device. An authenticated, local attacker can exploit this to execute arbitrary commands on the...

packetstormsecurity.com

Pentest notes for: packetstormsecurity.com Exploit Pack Nmap 7.80 scan initiated Tue Dec 3 09:27:33 2019 as: /usr/bin/nmap -sV -A -oA log/exploitpack.com exploitpack.com Nmap scan report for exploitpack.com 132.148.22.104 Host is up 0.18s latency. rDNS record for 132.148.22.104:...

NewStart CGSL CORE 5.04 / MAIN 5.04 : mod_auth_openidc Multiple Vulnerabilities (NS-SA-2019-0220)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has modauthopenidc packages installed that are affected by multiple vulnerabilities: - The OpenID Connect Relying Party and OAuth 2.0 Resource Server aka modauthopenidc module before 2.1.6 for the Apache HTTP Server does not sk...

Security update for clamav (moderate)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2019:2597-1 Rating: moderate References: 1144504 1149458 1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is...

Qualys Cloud Platform 8.22 New Features (VM, PC)

Update December 11, 2019: See additional details about this release. The 8.22.0 release adds several new features in Qualys Cloud Platform, adds a new API in Policy Compliance and support for 2 new technologies for OCA. Feature Highlights Qualys Cloud Platform Support for DNS tracking – You can n...

AppleShare IP Detection

Checks whether AppleShare IP is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

From Thousands of Security Alerts to a Handful of Insights

Understanding an attacker’s workflow and how Attack Analytics hunts them down In recent years we’ve seen a significant increase in the number and complexity of cyber-attacks. The accessibility of public tools and their automation capabilities, as well as distributed and anonymization features tha...