guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

auditpolCIS

auditpolCIS CIS基准测试 - Windows SIEM配置 这是一个用于测试Windows审核策略配置是否符合CIS基准建议的应用程序。几点说明： 测试系统为Windows Server 2019，使用的基准也是Windows Server 2019。 脚本通过SSH连接。Windows Server 2019自带SSH，只需启用即可。如果您希望看到WinRM（或其他）连接类型，请告知我或发送PR。 这里包含了一些CIS指南未涵盖的测试。这些子类别的建议设置基于这些事件的日志记录量，而非安全价值。在几乎所有情况下，建议关闭这些设置的审计。 YAML文件...

Audix

root@kitploit: | / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| 是一个 PowerShell 工具，用于快速配置 Windows 事件审计策略，以进行监控和事件响应。 请注意：此工具只会更改本地安全策略。如果应用于存在 GPO 设置的主机，最好在组策略默认配置文件中使用相同的设置，以确保所有系统获得相同的配置。如果未更改 GPO 配置文件以匹配这些设置，GPO 强制刷新将覆盖此配置。 Audix 允许简单配置 Windows 事件审计策略。Windows...

CVE-1999-0575

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

CVE-1999-0576

A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories...

EUVD-1999-0559

Malware in sbrugna...

EUVD-1999-0561

Malware in sbrugna...

EUVD-1999-0558

Malware in sbrugna...

EUVD-2022-51668

Malicious code in bioql PyPI...

CVE-2021-2245

Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Audit Policy privilege with network access via Oracle N...

CVE-1999-0577

A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories...

CVE-1999-0578

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys...

auditpolCIS - CIS Benchmark Testing Of Windows SIEM Configuration

CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows Server 2019. T...

CVE-2022-4313

A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...

CVE-2022-4313

A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...

Code injection

A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...

CVE-2022-4313

A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...

PT-2023-14178 · Tenable · Tenable

Name of the Vulnerable Software and Affected Versions: Tenable products affected versions not specified Description: A vulnerability was reported where an authenticated user with Scan Policy Configuration roles in Tenable products could manipulate audit policy variables by modifying the scan...

Tenable Network Security Tenable.Sc和Nessus 安全漏洞

Tenable Network Security Nessus and Tenable.Sc are both products of Tenable Network Security, U.S.A. Nessus is an open-source system vulnerability scanner.Tenable.Sc is a vulnerability analysis solution. Sc is a vulnerability analysis solution that supports real-time vulnerability assessment and...

[R1] Tenable Plugin Feed ID #202212081952 Fixes Arbitrary Code Execution Vulnerability

R1 Tenable Plugin Feed ID 202212081952 Fixes Arbitrary Code Execution Vulnerability Arnie Cabral Fri, 03/10/2023 - 16:28 Audit files that are built into the Tenable products provide capability to adjust the audit evaluation to meet organizational requirements. A vulnerability was reported where...