6434 matches found
. NET advanced code audit（the first lesson）XmlSerializer deserialization vulnerability-vulnerability warning-the black bar safety net
在.NET in the framework of the XmlSerializer class is a great tool, it is a highly structured XML data is mapped to . NET objects. The XmlSerializer class in the program through a single API call to perform the XML document and the object conversion between. The conversion mapping rules in the . N...
Kibana ESA-2019-01, ESA-2019-02, ESA-2019-03
Kibana versions before 5.6.15 and 6.6.1 have the following vulnerabilities: - A cross-site scripting XSS vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. CVE-2019-7608 - An arbitrary code execution flaw...
WordPress WP Security Audit Log <=3.3.1.1 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress WP Security Audit Log versions =3.3.1.1. Solution Update the WordPress WP Security Audit Log to the latest available version at least 3.3.1.2...
Ophcrack - A Windows Password Cracker Based On Rainbow Tables
Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms. Features: Runs on Windows, Linux/Unix, Mac OS X, ... Cracks LM...
Turning off audit logging does not result in any logs
h4. Steps to reproduce Enable Bamboo Audit Logging Make a change to confirm Audit Logging is turned on. Disable audit logging h4. Expected Behaviour An Audit log telling who and when turned off audit logging. h4. Observed Behaviour No Audit logs or any other log showing this change. h3. Workaroun...
Turning off audit logging does not result in any logs
h4. Steps to reproduce Enable Bamboo Audit Logging Make a change to confirm Audit Logging is turned on. Disable audit logging h4. Expected Behaviour An Audit log telling who and when turned off audit logging. h4. Observed Behaviour No Audit logs or any other log showing this change. h3. Workaroun...
Elastic Stack 6.6.1 and 5.6.15 security update
Kibana XSS issue ESA-2019-01 Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting XSS vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. Affected Versions Kibana versions before 5.6.15 and...
Siemens SIMATIC WinCC/Audit Viewer Detection (Windows SMB Login)
SMB login-based detection of Siemens SIMATIC WINCC Audit/Viewer. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...
F3-CMS FatFreeFramework 0.0.1 Database Disclosure
Exploit Title : F3-CMS FatFreeFramework 0.0.1 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : f3cms.ca fatfreeframework.com Software Download Link : github.com/vijinho/f3-cms/archive/dev-master.zip Software...
Vulnerability of the Server component: Security: Audit of the Oracle MySQL database management system, allowing a hacker to cause a service failure.
The vulnerability of the Server: Security: Audit component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
Make Sure Your Security Is Ready for the President’s Day Shopping Spree
By Tony Bradley The following article was originally written to provide e-retailers with tip and tricks for the Black Friday and Cyber Monday shopping. However, with the biggest President’s day spring sales approaching, the best practices and how-to remain the same. More about e-commerce security...
Protecting your Domain Names: Taking the First Steps
Everyone and everything on the Internet depends on the Domain Name System DNS being functional. The DNS has been a common vector for attacks in recent years, and 2019 seems to be no different. Many of these attacks have goals far more sinister than simply taking a company offline or defacing a...
About the security content of iOS 12.1.4 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
U.S. Dept Of Defense: SQL Injection in the `move_papers.php` on the https://██████████
Description Hello. I was able to find another one Time-based SQLI on the https://██████████/pubs/movepapers.php using pubgroupid parameter. This is my third SQLi and probably the last one found on this host. I wasn't able to detect more, but due to the big number of high impact issues found I als...
Linux: Audit login / logout
Monitoring login and logoff events can provide evidence for compromised user accounts or brute force attacks. This script checks if write access to SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Siemens SIMATIC WinCC/Audit Viewer Detection (Windows SMB Login)
Detects the installed version of Siemens SIMATIC WinCC/Audit Viewer for Windows This VT is a duplicate of the existing VT SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
DHS Orders U.S. Federal Agencies to Audit DNS Security for Their Domains
The U.S. Department of Homeland Security DHS has today issued an "emergency directive" to all federal agencies ordering IT staff to audit DNS records for their respective website domains, or other agency-managed domains, within next 10 business days. The emergency security alert came in the wake ...
Authorization Bypass
Linux kernel is vulnerable to authorization bypass. When creating audit records for parameters to executed children processes, an attacker can convince the Linux kernel audit subsystem can create corrupt records which may allow an attacker to misrepresent or evade logging of executing commands...
Information Disclosure
jboss-as-web is vulnerable to information disclosure attacks. The vulnerability exists as the security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the l...
