576 matches found
Horusec - An Open Source Tool That Improves Identification Of Vulnerabilities In Your Project With Just One Command
Horusec is an open source tool that performs static code analysis to identify security flaws during the development process. Currently, the languages for analysis are: C, Java, Kotlin, Python, Ruby, Golang, Terraform, Javascript, Typescript, Kubernetes, PHP, C, HTML, JSON, Dart. The tool has...
CMSmap
It is an offensive tool for web application security testing. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool appears to be designed for testing popular Content Management Systems CMSs such as WordPress,...
Announcing the general availability of Azure Defender for IoT
As businesses increasingly rely on connected devices to optimize their operations, the number of IoT and Operational Technology OT endpoints is growing dramatically—industry analysts have estimated that CISOs will soon be responsible for an attack surface multiple times larger than just a few yea...
Backdoor.Win32.NinjaSpy.c Remote Stack Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6eece319bc108576bd1f4a8364616264.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NinjaSpy.c Vulnerability: Remote Stack Buffer Overflow Description: The specimen drop...
Information disclosure
A vulnerability has been identified in SICAM A8000 CP-8000 All versions V16, SICAM A8000 CP-8021 All versions V16, SICAM A8000 CP-8022 All versions V16. A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position...
CVE-2020-17096
creationtimestamp| type| source ---|---|--- 2020-12-10 02:33:03+00:00| seen| https://t.me/cibsecurity/18399 2020-12-10 02:36:04+00:00| seen| https://t.me/cibsecurity/18419 2020-12-10 02:38:53+00:00| seen| https://t.me/cibsecurity/18431 2020-12-10 03:25:17+00:00| seen| https://t.me/cibsecurity/184...
chennaiyellowpagesonline.com Cross Site Scripting vulnerability OBB-1494071
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-14869 vulnerabilities
Vulnerabilities for packages: mysql...
lemonaid-charitea-ev.org Cross Site Scripting vulnerability OBB-1193776
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
webreg.dnp.go.th Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160476 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
gidagundemi.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1127427 Security Researcher g0bl1nsec Helped patch 3748 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting gidagundemi.com website a...
Automatically Discover, Prioritize and Remediate Windows Adobe Type Manager Library Remote Code Execution Vulnerability (ADV200006) using Qualys VMDR®
On March 23, Microsoft released zero day advisory ADV200006 to address two critical remote code execution vulnerabilities in Adobe Type Manager Library that affects multiple versions of Windows and Windows Server. The vulnerabilities exist within the way that Windows parses OpenType fonts. For...
libertyathletic.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1069568 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-14287
creationtimestamp| type| source ---|---|--- 2019-10-14 20:34:27+00:00| exploited| https://t.me/thehackernews/498 2019-10-15 08:28:13+00:00| seen| https://t.me/SecLabNews/5985 2019-10-15 09:18:25+00:00| seen| https://t.me/canyoupwnme/6044 2019-10-16 09:13:34+00:00| seen| https://t.me/HackerOne/253...
New 4CAN tool helps identify vulnerabilities in on-board car computers
By Alex DeTrano, Jason Royes, and Matthew Valites. Executive summary Modern automobiles contain hundreds of sensors and mechanics that communicate via computers to understand their surrounding environment. Those components provide real-time information to drivers, connect the vehicle to a global...
BADministration - Tool Which Interfaces with Management or Administration Applications from an Offensive Standpoint
BADministration is a tool which interfaces with management or administration applications from an offensive standpoint. It attempts to provide offsec personnel a tool with the ability to identify and leverage these non-technical vulnerabilities. As always: use for good, promote security, and figh...
Data Breach Lessons from the Trenches
In this webcast Threatpost editor Tom Spring examines the data breach epidemic with the help of noted breach hunter and cybersecurity expert Chris Vickery. He shares how companies can identify their own insecure data, remediate against a data breach and offers tips on protecting data against futu...
CVE-2018-19635
creationtimestamp| type| source ---|---|--- 2019-01-23 16:29:30+00:00| seen| MISP/5c4894b0-10c0-47f8-ba1a-30760a021402...
mandaluyongflora.com XSS vulnerability
Open Bug Bounty ID: OBB-718476 Description| Value ---|--- Affected Website:| mandaluyongflora.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...