Urban Company: Private ip leaking through response

Name of Vulnerability: Information desclosure User Details: +91 ████ Summary: Private ip addresses are leaking through response in urban clap. Description: Hi team. During my research i found some IP address from the response.After finding the origin of the ip i found that these ip addresses are...

PT-2024-6537 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.30 PHP versions 8.2. before 8.2.24 PHP versions 8.3. before 8.3.12 Description: The issue is related to errors in security settings of the PHP interpreter. Exploitation of this issue may allow a remote attacker to...

Microsoft Office ActiveX Controls Enabled Without Restrictions Or Prompting

A Microsoft Office application installed on the remote host has ActiveX controls enabled without restrictions and without prompting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

The Pirate Bay spreading malware PirateMatryoshka via reputed seeders

By Waqas Cybercriminals often use torrent services to distribute malicious code since users who look for illegal content usually disable their privacy and security settings on the web as well as ignore system notifications. Resultantly, they fall prey to adware and malware campaigns hosted by...

Security Analysis of the LIFX Smart Light Bulb

The security is terrible: In a very short limited amount of time, three vulnerabilities have been discovered: Wifi credentials of the user have been recovered stored in plaintext into the flash memory. No security settings. The device is completely open no secure boot, no debug interface disabled...

Securing New Devices

During the holidays, internet-connected devices also known as Internet of Things IoT are often popular gifts—such as smart TVs, watches, toys, phones, and tablets. This technology provides a level of convenience to our lives, but it requires that we share more information than ever. The security ...

Access Control Bypass

Apache Tomcat is vulnerable to access control bypass. Attackers are able to bypass intended access restrictions when Tomcat is started with errors while reading the web.xml file, which results in improper security settings...

WebExec - (Authenticated) User Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Windows XP systems that are not part of a domain default to treating all network logons as if they were Guest. This prevents SMB relay attacks from gaining administrativ...

Naming & Shaming Web Polluters: Xiongmai

What do we do with a company that regularly pumps metric tons of virtual toxic sludge onto the Internet and yet refuses to clean up their act? If ever there were a technology giant that deserved to be named and shamed for polluting the Web, it is Xiongmai -- a Chinese maker of electronic parts th...

Microsoft Office: Protection From Zone Elevation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officezoneelevation.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Protection From Zone Elevation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

Microsoft Office: Disable user name and password

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officedisableusernamepasswd.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable user name and password Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Office: Bind to object

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officebindtoobject.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Bind to object Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Microsoft Office: Navigate URL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officenavigateurl.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Navigate URL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Microsoft Office: Local Machine Zone Lockdown Security

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officelockdownsecurity.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Local Machine Zone Lockdown Security Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Office: Add-on Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeaddonmanagement.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Add-on Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Microsoft Office: Scripted Window Security Restrictions

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officescriptedwindow.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Scripted Window Security Restrictions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Office: Saved from URL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officesavedfromurl.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Saved from URL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Microsoft Office: Object Caching Protection

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeobjectcachingprotection.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Object Caching Protection Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Security Bulletin: Onyx link security (PO07142)

Summary Links that have the same access levels as their ends, but receive them through different security settings, are not returned correctly in search results. This can result in search results being incorrectly removed. Vulnerability Details This issue affects systems that use IBM i2 Analyze...

Microsoft Windows: Service: Connected User Experiences and Telemetry Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winconnecteduserexperience.nasl 11387 2018-09-14 12:19:57Z emoss $ Check value for Connected User Experiences and Telemetry Service DiagTrack Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...