Linux: System Information in /etc/motd

The content of /etc/motd file is displayed to users after successful login. Following escape chars display information about the system: - \m: machine architecture - \r: operating system release - \s: operating system name - \v: operating system version Copyright C 2020 Greenbone Networks GmbH...

Security Bulletin: IBM Content Navigator discloses operating system information in logon response.

Summary IBM Content Navigator includes information about the host operating system in the response after the user successfully authenticates. Vulnerability Details CVEID: CVE-2019-4679 DESCRIPTION: IBM Content Navigator could allow an authenticated user to gain information about the hosting...

sLoad launches version 2.0, Starslord

sLoad, the PowerShell-based Trojan downloader notable for its almost exclusive use of the Background Intelligent Transfer Service BITS for malicious activities, has launched version 2.0. The new version comes on the heels of a comprehensive blog we published detailing the malware’s multi-stage...

Digi AnywhereUSB 14 XSS Injection Vulnerability

The AnywhereUSB product is a network-enabled USB hub that allows USB devices to be connected in any LAN. Digi AnywhereUSB 14 suffers from an XSS injection vulnerability, which could be exploited by an attacker to conduct an xss attack against the corresponding program to obtain other information ...

CVE-2019-7162

Zoho ManageEngine ADSelfService Plus 5.6 Build 5607 is affected by an information-disclosure vulnerability. An exposed service allows an unauthenticated actor to retrieve internal system information and modify the product installation. The issue is confirmed in multiple sources referencing this e...

Microsoft Access Information Disclosure Vulnerability

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an...

Google Android System Information Disclosure Vulnerability (CNVD-2019-44264)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Google Android version 10. The vulnerability can be exploited by an attacker to disclose information...

Google Android System Information Disclosure Vulnerability (CNVD-2019-44270)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. There is a security vulnerability in System in Google Android. An attacker can exploit the vulnerability to leak information...

Google Android System Information Disclosure Vulnerability (CNVD-2019-44261)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A security vulnerability exists in System in Google Android versions 9 and 10. An attacker can exploit the vulnerability to leak information...

CVE-2019-15687

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to remote disclosure of various information about the user's system like Window...

Octopus Deploy Code Issue Vulnerability

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A code issue vulnerability exists in Octopus Deploy, which can be exploited by an attacker with the help of a specially crafted package to disclose underlying...

Login Bypass Vulnerability in LebiShop (Multi-Language Online Shopping Mall System)

Lebi multilingual online shopping mall system LebiShop, free , full open source , support for secondary development . NET 4.5 C language development , using SQL Server and MySQL database . LebiShop has a login bypass vulnerability that can be exploited by an attacker to log in to the backend of t...

Information disclosure

In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information...

CVE-2019-18659

The Wireless Emergency Alerts WEA protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 aka SIB12. NOTE: testing inside an RF-isolated shield box suggested that...

Apache Solr 8.2.0 Remote Code Execution

Title: Apache Solr 8.2.0 - Remote Code Execution Date: 2019-11-01 Author: @l3xwong Vendor: https://lucene.apache.org/solr/ Software Link: https://lucene.apache.org/solr/downloads.html CVE: N/A github: https://github.com/AleWong/Apache-Solr-RCE-via-Velocity-template usage: python3 script.py ip por...

Aura-Botnet - A Super Portable Botnet Framework With A Django-based C2 Server

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

Login Bypass Vulnerability in YOGO Video Conferencing System

Ltd. is a high-tech service provider dedicated to multimedia communication technology, providing customers with the best multimedia communication solutions. There is a login bypass vulnerability in YOGO video conferencing system, which can be exploited by attackers to log in the system to obtain...

Design/Logic Flaw

An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker...

CVE-2019-14222

Affected software/impact: Alfresco Community Edition 6.0 and earlier exposes a vulnerability in the Solr Web Admin Interface due to a default private key present in default installations. An unauthenticated remote attacker can exploit this by extracting the private key and bundling it into a PKCS...

CB TAU Threat Intelligence Notification: State-Sponsored Espionage Group Targeting Multiple Verticals with ‘Crosswalk’

FireEye recently reported on APT41, a Chinese state-sponsored espionage group. The group has been documented as targeting healthcare, high-tech, and telecommunications companies for traditional corporate espionage purposes. Additionally this group has also targeted companies in the video game...