Security update for trivy (moderate)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2022:10022-1 Rating: moderate References: 1199760 Cross-References: CVE-2022-23648 CVE-2022-28946 CVSS scores: CVE-2022-23648 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-23648 SUSE: 5.5...

MAL-2022-1367 Malicious code in azure-purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5532 Malicious code in purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a300b153dbc45cf8312f002d77013939515cb65a2f403173ece9338d55d5585a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a300b153dbc45cf8312f002d77013939515cb65a2f403173ece9338d55d5585a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning

For years, the two most popular methods for internal scanning: agent-based and network-based were considered to be about equal in value, each bringing its own strengths to bear. However, with remote working now the norm in most if not all workplaces, it feels a lot more like agent-based scanning ...

gogo

gogo blog posts. - https://chainreactors.github.io/wiki/blog...

Cisco Expressway XML External Object Reference Disclosure

The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software related to external objects’ XML links is due to incorrect restrictions on these links. Exploiting this vulnerability allows a malicious actor to view the...

AutoPWN Suite - Project For Scanning Vulnerabilities And Exploiting Systems Automatically

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. How does it work? AutoPWN Suite uses nmap TCP-SYN scan to enumerate the host and detect the version of softwares running on it. After gathering enough information about the host, AutoPWN Suite...

CRLFsuite - Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection. Installation $ git clone https://github.com/Nefcore/CRLFsuite.git $ cd CRLFsuite $ sudo python3 setup.py install $ crlfsuite -h Features Single URL scanning Multiple URL scanning Stdin supported GET & POST method supported...

Command injection

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file...

Moderate: Red Hat Security Advisory: ACS 3.70 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes bug fixes and feature improvements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score...

BinAbsInspector - Vulnerability Scanner For Binaries

BinAbsInspector Binary Abstract Inspector is a static analyzer for automated reverse engineering and scanning vulnerabilities in binaries, which is a long-term research project incubated at Keenlab. It is based on abstract interpretation with the support from Ghidra. It works on Ghidra's Pcode...

F-secure Atlant Denial of Service Vulnerability

F-secure Atlant is a platform from the Finnish company F-secure for building applications that can scan and detect malicious files. a denial-of-service vulnerability exists in F-Secure Atlant, which can be exploited by attackers to crash the scanning engine by scanning the aemobile component...

Linglong security vulnerabilities

Linglong is an A-asset cruise scanning system by drunkkk's personal developer. It is used to discover assets, perform port blasting, and help organizations find weak password problems faster. Linglong v1.0 version has a security vulnerability that stems from an access control issue. An attacker...

CVE-2022-28875

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

CVE-2022-28875

The CVE-2022-28875 entry describes a DoS flaw in F-Secure Atlant and certain WithSecure products where scanning the aemobile component crashes the scanning engine. The vulnerability can be triggered remotely by an attacker, indicating remote attack practicality. The connected records consistently...

CVE-2022-28875: Improper Resource Shutdown or Release

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

F-Secure Atlant security vulnerabilities

F-secure Atlant is a platform from the Finnish company F-secure for building applications that can scan and detect malicious files. a denial-of-service vulnerability exists in F-Secure Atlant, which can be exploited by attackers to crash the scanning engine by scanning the aemobile component...

Heap overflow

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an...