SPN Discovery

Services that support Kerberos authentication require to have a Service Principal Name SPN associated to point users to the appropriate resource for connection. Discovery of SPNs inside an internal network is performed via LDAP queries and can assist red teams to identify hosts that are running...

[SECURITY] Fedora 28 Update: ncurses-6.1-5.20180224.fc28

The curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses new curses library is a freely distributable replacement for the discontinued 4.4 BSD classic curses library. This package contains support utilities, including a...

[SECURITY] Fedora 27 Update: ncurses-6.0-14.20170722.fc27

The curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses new curses library is a freely distributable replacement for the discontinued 4.4 BSD classic curses library. This package contains support utilities, including a...

Airpydump - Analyze Wireless Packets On The Fly. Currently Supporting Three Working Modes (Reader, Live, Stealth)

Analyze Wireless Packets on the fly. Currently supporting three working Modes Reader, Live, Stealth Description airpydump is a wireless packet analyzer, providing the interface most likely that of airodump-ng from aircrack suite. It currently provides three working modes which are Reader, Stealth...

KB4073065: Surface guidance to protect against silicon-based microarchitectural and speculative execution side-channel vulnerabilities

None None...

May 17, 2018—KB4103724 (Preview of Monthly Rollup)

None None...

Cisco IOS XE Privilege Escalation

The vulnerability of the Cisco IOS operating system’s web interface is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using the VTY interface...

TBK DVR4104 / DVR4216 - Credentials Leak

-- coding: utf-8 -- import json import requests import argparse import tableprint as tp class Colors: BLUE = '\03394m' GREEN = '\03332m' RED = '\0330;31m' DEFAULT = '\0330m' ORANGE = '\03333m' WHITE = '\03397m' BOLD = '\0331m' BRCOLOUR = '\0331;37;40m' banner = ''' ..--.. ..... .-- ..... . .": "-...

Apple macOS High Sierra Terminal Command Injection Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Terminal is one of the terminal components. A security vulnerability exists in the Bracketed Paste Mode of the Terminal component in Apple macOS High Sierra versions prior to 10.13.4. The vulnerability...

CVE-2017-7534: Improper Neutralization of Input During Web Page Generation

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod...

PT-2018-8399

Name of the Vulnerable Software and Affected Versions OpenShift Enterprise versions 3.x Description The issue is related to a stored XSS flaw in the log viewer for pods, caused by the lack of sanitation of user input, specifically terminal escape characters. This leads to the automatic creation o...

CVE-2014-1226

The pipeinitterminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-6876...

PT-2018-4108

Name of the Vulnerable Software and Affected Versions s3dvt versions 0.2.2 and earlier Description The issue allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. This is due to the pty init terminal and pipe init terminal functions in main.c...

CVE-2018-4106

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content...

CVE-2018-4106

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content...

CVE-2018-4106

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content...

PT-2018-16396

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.4 Description The issue involves the Bracketed Paste Mode of the "Terminal" component, allowing user-assisted attackers to inject arbitrary commands within pasted content. Recommendations For macOS versions prior ...

CVE-2018-4106: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-002)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - ATS - CFNetwork Session - CoreFoundation - CoreTypes - curl - Disk Images - iCloud Drive - Kernel - kext...