CVE-2017-12350

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual...

CVE-2017-12350

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual...

Fedora 26 : perl-Catalyst-Plugin-Static-Simple (2017-5cb8354008)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 25 : perl-Catalyst-Plugin-Static-Simple (2017-184d078d87)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

[SECURITY] Fedora 25 Update: perl-Catalyst-Plugin-Static-Simple-0.34-1.fc25

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

[SECURITY] Fedora 26 Update: perl-Catalyst-Plugin-Static-Simple-0.34-1.fc26

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

Cisco Umbrella Insights Virtual Appliance Static Credentials Vulnerability

A vulnerability in Cisco Umbrella Insights Virtual Appliances could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker...

How to solve the Malwarebytes CrackMe: a step-by-step tutorial

The topic of this post is a Malwarebytes CrackMe—an exercise in malware analysis that I recently created. First, the challenge was created to serve internal purposes, but then it was released to the community on Twitter and triggered a lot of positive response. Thanks to all of you who sent in yo...

PYSEC-2017-40

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...

Interface Aware Fuzzing for Kernel Drivers: DIFUZE

Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system...

CloudBees Static Analysis Utilities and DRY plugin cross-site scripting vulnerability

CloudBees Static Analysis Utilities is the United States CloudBees company's Jenkins Java-based development of continuous integration tools in a static analysis tool . DRY Plugin is one of the analysis report generation plug-in . A cross-site scripting vulnerability exists in the Details view in...

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

DEBIAN-CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

UBUNTU-CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

CVE-2017-16248

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...

CVE-2017-16248

The CVE-2017-16248 entry concerns the Perl Catalyst-Plugin-Static-Simple module prior to version 0.34. The vulnerability allows remote attackers to read arbitrary files when there is a '.' character anywhere in the pathname, contradicting the policy that access should be allowed only if the filen...

Catalyst-Plugin-Static-Simple Arbitrary File Read Vulnerability

Perl is an American programmer Larry Wall Larry Wall developed a cross-platform programming language. Catalyst-Plugin-Static-Simple module is one of the static content rapid development module. A security vulnerability exists in versions of the Perl Catalyst-Plugin-Static-Simple module prior to...

CloudBees Static Analysis Utilities plugin cross-site scripting vulnerability

CloudBees Static Analysis Utilities plugin is the U.S. CloudBees company's Jenkins Java-based development of continuous integration tools in a static analysis plugin . A cross-site scripting vulnerability exists in the Details view in the CloudBees Static Analysis Utilities plugin. A remote...