start-selenium (>=0.0.1, <=0.0.5) potentially affected by CVE-2016-10565 via operadriver (0.2.2)

operadriver NPM version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on operadriver and may be impacted: - start-selenium =0.0.1, =0.0.5 Source cves: CVE-2016-10565 Source advisory: GHSA-2WRQ-WMQF-8VCC...

Downloads Resources over HTTP in operadriver

operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attack...

coba (>=1.0.8, <=1.0.9), frames-selenium (>=1.0.34, <=1.1.7) +6 more potentially affected by CVE-2016-10589 via selenium-binaries (>=0.1.6, <=0.13.11)

selenium-binaries NPM version =0.1.6, =1.0.8, =1.0.34, =1.0.0, =1.0.0, =0.8.0, =0.1.0, =0.13.0, =1.0.1 Source cves: CVE-2016-10589 Source advisory: OSV:GHSA-H4MC-R4F4-HCF4...

GHSA-H4MC-R4F4-HCF4 selenium-binaries downloads resources over HTTP

Versions of selenium-binaries prior to 0.15.0 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

coba (>=1.0.8, <=1.0.9), frames-selenium (>=1.0.34, <=1.1.7) +6 more potentially affected by CVE-2016-10589 via selenium-binaries (>=0.1.6, <=0.13.11)

selenium-binaries NPM version =0.1.6, =1.0.8, =1.0.34, =1.0.0, =1.0.0, =0.8.0, =0.1.0, =0.13.0, =1.0.1 Source cves: CVE-2016-10589 Source advisory: GHSA-H4MC-R4F4-HCF4...

selenium-binaries downloads resources over HTTP

Versions of selenium-binaries prior to 0.15.0 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: GHSA-5Q75-CXCQ-WR26...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: OSV:GHSA-5Q75-CXCQ-WR26...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: MEND:CVE-2018-20242...

Splunk Enterprise 7.2.3 - (Authenticated) Custom App Remote Code Execution

Splunk Enterprise 7.2.3 - Authenticated Custom App Remote Code Execution !/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Date: January 23, 2019 Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link:...

Splunk Enterprise 7.2.3 Command Execution

!/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Date: January 23, 2019 Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html Version: 7.2.3 Tested on: kali...

Splunk Enterprise 7.2.3 - Authenticated Custom App Remote Code Execution Exploit

Exploit for windows platform in category web applications !/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html...

Splunk Enterprise 7.2.3 - (Authenticated) Custom App Remote Code Execution

!/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Date: January 23, 2019 Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html Version: 7.2.3 Tested on: kali...

Fedora 29 : mediawiki (2018-f4b65fc7cd)

https://www.mediawiki.org/wiki/Releasenotes/1.29MediaWiki1.29.3 - T169545, CVE-2018-0503 SECURITY: $wgRateLimits entry for 'user' overrides 'newbie'. - T194605, CVE-2018-0505 SECURITY: BotPasswords can bypass CentralAuth's account lock. - T180551 Fix LanguageSrTest for language converter - T18055...

Qualys Cloud Platform 2.35 New Features

This release of the Qualys Cloud Platform version 2.35 includes updates and new features for AssetView, Cloud Agent, Security Assessment Questionnaire, and Web Application Scanning, highlights as follows. Note: this post has been edited after publishing to remove the Rule-Based Method to...

XML External Entity (XXE)

selenium-firefox-driver is vulnerable to XML external entity XXE attacks. The vulnerability exists due to the lack of disabling the default expanding entity reference option, allowing XXE attacks...

Social Media Enumeration & Correlation Tool: Social Mapper

Social Mapper is a Open Source Intelligence Tool that uses facial recognition to correlate social media profiles across different sites on a large scale. It takes an automated approach to searching popular social media sites for targets names and pictures to accurately detect and group a person’s...

browsertime (>=0.8.1, <=0.8.6), cssnow (2.0.0) +4 more potentially affected by CVE-2018-3772 via whereis (>=0.2.1, <=0.4.0)

whereis NPM version =0.2.1, =0.8.1, =2.1.2, =0.0.1, =2.42.0-2.9.0, =3.0.0-alpha, =3.0.0-alpha-8 Source cves: CVE-2018-3772 Source advisory: OSV:GHSA-WJR4-2JGW-HMV8...

browsertime (>=0.8.1, <=0.8.6), cssnow (2.0.0) +4 more potentially affected by CVE-2018-3772 via whereis (>=0.2.1, <=0.4.0)

whereis NPM version =0.2.1, =0.8.1, =2.1.2, =0.0.1, =2.42.0-2.9.0, =3.0.0-alpha, =3.0.0-alpha-8 Source cves: CVE-2018-3772 Source advisory: GHSA-WJR4-2JGW-HMV8...

windows-seleniumjar-mirror remote code execution vulnerability

windows-seleniumjar-mirror is a package for downloading selenium jar files. A security vulnerability exists in windows-seleniumjar-mirror, which originates when a program downloads an executable file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by...