PT-2019-5738

Name of the Vulnerable Software and Affected Versions GateOne affected versions not specified Description The issue is related to insufficient input validation in the terminal emulator and SSH client, GateOne. This allows remote attackers to execute arbitrary commands via shell metacharacters in...

UPDATE: MITRE CALDERA 2.3.0

PenTestIT RSS Feed A month ago, MITRE Caldera 2.2.0 was released and a couple of days back now MITRE CALDERA 2.3.0 was released as well. If you remember, I wrote briefly about this automated adversary emulation system in my post titled – List of Adversary Emulation Tools. A lot of changes have be...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

Design/Logic Flaw

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-15525

CVE-2019-15525 affects the pw3270 terminal emulator prior to version 5.1, where SSL certificate validation is missing. The consequence is that a network attacker could potentially impersonate a trusted server, enabling improper handling of TLS connections. The provided documents confirm the issue...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

PT-2019-14245

Name of the Vulnerable Software and Affected Versions pw3270 versions prior to 5.1 Description The issue concerns a missing SSL certificate validation in the terminal emulator. Recommendations For versions prior to 5.1, update to version 5.1 or later to resolve the issue...

Sampler - A Tool For Shell Commands Execution, Visualization And Alerting (Configured With A Simple YAML File)

Sampler is a tool for shell commands execution, visualization and alerting. Configured with a simple YAML file. Installation macOS brew cask install sampler or curl -Lo /usr/local/bin/sampler https://github.com/sqshq/sampler/releases/download/v1.0.1/sampler-1.0.1-darwin-amd64 chmod +x...

HackerTarget ToolKit v2.0 - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery

Use open source tools and network intelligence to help organizations with attack surface discovery and identification of security vulnerabilities. Identification of an organizations vulnerabilities is an impossible task without tactical intelligence on the network footprint. By combining open...

CVE-2016-10812

In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs SEC-117...

CVE-2016-10811

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

lldptool: improper sanitization of shell-escape codes

lldptool can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal...

Everything you need to know about ATM attacks and fraud: part 2

This is the second and final installment of our two-part series on automated teller machine ATM attacks and fraud. In part 1, we identified the reasons why ATMs are vulnerable—from inherent weaknesses of its frame to its software—and delved deep into two of the four kinds of attacks against them:...

CVE-2019-14402

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

CVE-2019-14402

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

Design/Logic Flaw

cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp SEC-481...

PT-2019-13671

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 78.0.18 Description The issue arises from cPanel unsafely determining terminal capabilities by using infocmp. Recommendations For versions prior to 78.0.18, update to version 78.0.18 or later to resolve the issue...