OPENSUSE-SU-2020:0585-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690 bsc1146691 bsc1146692 bsc1146766 bsc1146776 bsc1146784 bsc1146785 bsc1146787 - Fixed issues where the ocfmon user was created with a default password bsc102168...

Security update for resource-agents (important)

openSUSE Security Update: Security update for resource-agents Announcement ID: openSUSE-SU-2020:0585-1 Rating: important References: 1021689 1146687 1146690 1146691 1146692 1146766 1146776 1146784 1146785 1146787 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now...

SUSE-SU-2020:14348-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690 bsc1146784 bsc1146785 bsc1146787 - Fixed issues where the ocfmon user was created with a default password bsc1021689, bsc1146687...

SUSE-SU-2020:1092-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690 bsc1146691 bsc1146776 bsc1146784 bsc1146785 bsc1146787 bsc1146789 - Fixed issues where the ocfmon user was created with a default password bsc1021689, bsc11466...

SUSE-SU-2020:1091-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690, bsc1146691, bsc1146692, bsc1146766, bsc1146776, bsc1146784, bsc1146785, bsc1146787, bsc1146789 - Fixed issues where the ocfmon user was created with a default...

SUSE-SU-2020:1090-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690, bsc1146691, bsc1146692, bsc1146766, bsc1146776, bsc1146784, bsc1146785, bsc1146787 - Fixed issues where the ocfmon user was created with a default password...

SUSE-SU-2020:1089-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690 bsc1146691 bsc1146692 bsc1146766 bsc1146776 bsc1146784 bsc1146785 bsc1146787 - Fixed issues where the ocfmon user was created with a default password bsc102168...

The vulnerability of the fence-agents software, related to coding errors, allows a hacker to trigger a service failure.

The vulnerability of the fence-agents software is related to coding errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Flux-Keylogger - Modern Javascript Keylogger With Web Panel

Modern javascript keylogger with web panel Web panel: Logging: Keylogger Cookies Location Remote IP User-Agents Installation server files: Upload files from server directory to you server Change default username, password in flux.php Go to http://you.host/flux.php Click build Now inject script ta...

CVE-2020-8468

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication...

PT-2020-15357 · Jenkins · Jenkins Mabl Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Mac Plugin versions 1.1.0 and earlier Description: The issue concerns the lack of SSH host key validation when connecting agents created by the plugin, which could enable man-in-the-middle attacks. This allows an attacker to intercept...

UPDATE: APfell 1.4

APfell 1.4 was released a few hours ago! If you remember, I briefly mentioned about this tool in my seven month old post titled – List of Open Source C2 Post-Exploitation Frameworks. When this project started out, it was targeted more at MacOS alone. But what excites me about this newer release i...

Faraday presents the latest version of their Security Platform for Vulnerability Management Automation

Miami, February 19, 2020 - Faraday is opening 2020 by strengthening their releases using the featured cybersecurity worldwide events calendar, starting next week with BSides and RSAC in San Francisco. As a Blackhat Global Partner, the company will also participate as a sponsor in all BH’s global...

BurpSuite Random User-Agents - Burp Suite Extension For Generate A Random User-Agents

A Burp Suite extension to help pentesters to generate a random user-agent. This extension has been developed by M'hamed @m4ll0k Outaadi. Installation Download a jar file in release or compile the java code: $ git clone https://github.com/m4ll0k/BurpSuite-RandomUserAgent.git random-useragents $ cd...

Oracle Linux 7 : ipa (ELSA-2020-0378)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0378 advisory. - Resolves: 1777303 - CVE-2019-10195 ipa: batch API logging user passwords to /var/log/httpd/errorlog - CVE-2019-10195: Don't log passwords embedded in...

CVE-2020-8447

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a use-after-free during processing of syscheck formatted msgs received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted...

CVE-2020-8447

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a use-after-free during processing of syscheck formatted msgs received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted...

CVE-2020-8443

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs received from authenticated remote agents and delivered to the analysisd processing queue by...

CVE-2020-8443

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs received from authenticated remote agents and delivered to the analysisd processing queue by...

CVE-2020-8444

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a use-after-free during processing of ossec-alert formatted msgs received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted...