OSINT Gathering Tool: Inquisitor

OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...

mapr Information Disclosure

Hello, The mapr web frontend component creates an information disclosure vulnerability. During the setup of mapr the configure.sh script calls a function ConfigureWSRole: function ConfigureWSRole if $clientOnly -eq 0 -a $dontChangeSecurityPermissionsOn -eq 0 ; then ConfigureRunUserForWS fi This...

PT-2017-17664

Name of the Vulnerable Software and Affected Versions MODX Revolution versions 2.5.4-pl and earlier Description The issue allows remote attackers to conduct attacks, potentially leading to a denial of service due to cookie quota exhaustion or HTTP Response Splitting attacks, which can result in...

PT-2017-17668

Name of the Vulnerable Software and Affected Versions MODX Revolution versions 2.5.4-pl and earlier Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the core path parameter in the setup/templates/findcore.php file. Recommendations For MODX Revoluti...

CVE-2017-7324: Improper Control of Generation of Code

setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the corepath parameter...

CVE-2017-7320: Improper Neutralization of Input During Web Page Generation

setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service cookie quota exhaustion, or conduct HTTP Response Splitting attacks with resulta...

CVE-2017-7321: Improper Control of Generation of Code

setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the configkey parameter to the setup/index.php?action=welcome URI...

PT-2017-17665

Name of the Vulnerable Software and Affected Versions MODX Revolution versions 2.5.4-pl and earlier Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the config key parameter to the "setup/index.php?action=welcome" URI. Recommendations For MODX...

Setting up a default landing page on Storefront 3.0

The article describes how to set the default landing page in x1 / 3.x on StoreFront 3.x...

NetScaler Double Hop Communication Flow with StoreFront

This article explains how the communication flow works when we configure NetScaler in double hop with StoreFront...

PVS targets experience BSOD: IRQL Not Less or Equal on targets created using XDSW when booting for the first time

PVS Target devices created using Xendesktop Setup Wizard are running in toa blue screen of death issue. The error message displayed on the BSOD screen shows the following message: Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for yo...

pfsense 2.3.2 Code Execution

Security Advisory - Curesec Research Team 1. Introduction Affected Product: pfsense 2.3.2 Fixed in: 2.3.3 Fixed Version Link: https://pfsense.org/download/ Vendor Website: https://www.pfsense.org/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 02/06/2017 Disclosed ...

MaxPatrol 8 installation process

Today I have a great opportunity to write about MaxPatrol 8. For me it is a very nostalgic experience. I worked for many year in Positive Technologies developing this product. And now I can write about it from the customer side. MaxPatrol is still not very well known outside Russia and CIS,...

How to configure ADFS Claim Rules and StoreFront with Multiple Domains

How to configure ADFS Claim Rules and StoreFront with multiple domains?...

PT-2018-10415

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.2 Description The issue is related to the etm setup aux function in the Linux kernel, which can cause a denial of service panic due to incorrect use of a parameter as a local variable. Recommendations For...

Cobbler 2.8.0 - (Authenticated) Remote Code Execution

Cobbler 2.8.0 - Authenticated Remote Code Execution !/usr/bin/python """ Exploit title: Cobbler 2.8.x Authenticated RCE. Author: Dolev Farhi Contact: dolevf at protonmail.com @hack6tence Date: 03-16-2017 Vendor homepage: cobbler.github.io Software version: v.2.5.160805 Software Description...

Android DoS

The vulnerability of the Setup Wizard component in the Android operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures, as well as lead to the device becoming completely unusable and requiring recompiling...

Android DoS

The vulnerability of the Setup Wizard component in the Android operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to require user input for Google accounts after a reboot. This could lead to service interruptions and even cause...

Google Android Setup Wizard Denial of Service Vulnerability

Google Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Setup Wizard. An attacker can exploit this vulnerability to cause ...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...