CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2023-33965

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

Brook 操作系统命令注入漏洞

Brook is a cross-platform programmable web tool for individual developers of TxThinking. A security vulnerability exists in Brook. An attacker can exploit this vulnerability to trick a victim into visiting a malicious web page, which will trigger a request to the local "tproxy" service, leading t...

CVE-2023-33965: Improper Neutralization of Special Elements used in an OS Command

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

PT-2023-24606 · Brook · Brook

Name of the Vulnerable Software and Affected Versions: Brook versions prior to 20230606 Description: The tproxy server in Brook is vulnerable to a drive-by command injection. An attacker can trick a victim into visiting a malicious web page, triggering requests to the local tproxy service and...

stonybrook.edu Cross Site Scripting vulnerability OBB-3355683

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

stonybrook.edu Cross Site Scripting vulnerability OBB-2914471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-5509-1 dovecot vulnerability

Julian Brook discovered that Dovecot incorrectly handled multiple passdb configuration entries. In certain configurations, a remote attacker could possibly use this issue to escalate privileges...

Dovecot IMAP Server 2.2 Improper Access Control Vulnerability

Dovecot IMAP server version 2.2 suffers from a privilege escalation vulnerability. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. Thes...

Chris Brook Says Farewell to Threatpost

Mike Mimoso talks to Chris Brook who is leaving Threatpost after eight years. Chris recalls the early days of the site and his role in helping get it off the ground. He also talks about how security has evolved right alongside Threatpost. Music by Chris Gonsalves...

Got Robocalled? Don’t Get Mad; Get Busy.

Several times a week my cell phone receives the telephonic equivalent of spam: A robocall. On each occasion the call seems to come from a local number, but when I answer there is that telltale pause followed by an automated voice pitching some product or service. So when I heard from a reader who...

brooktavernermail.co.uk XSS vulnerability

Vulnerable URL: http://brooktavernermail.co.uk/admin/index.php?page=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.09.2017 Latest check for patch:| 25.09.2017 22:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

stonybrookphysicians.com XSS vulnerability

Vulnerable URL: https://www.stonybrookphysicians.com/htmlphysician/login.asp?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 160931...

Mike Mimoso and Chris Brook Discuss Gatekeeper, Stagefright 2.0, the Accidental Windows Update and More

Mike Mimoso and Chris Brook discuss the week in news–the latest Gatekeeper bypass in OS X, Stagefright 2.0, that accidental Windows Update, and Apple’s new privacy initiative. Download: newswrap10-2-15.mp3 Music by Chris Gonsalves...

Hacker Leaks Kelly Brook's Photos Once Again

After the last year's scary celebrities photo leaks incident 'The Fappening' and 'The Spanning', we thought that the celebs private pictures and contents are finally safe due to tight security provided by various cloud service provider and online awareness. But … Kelly Brook has reportedly fallen...

iVault Private P&V 1.1 iOS - Path Traversal Vulnerability

Document Title: =============== iVault Private P&V 1.1 iOS - Path Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1253 Release Date: ============= 2014-04-09 Vulnerability Laboratory ID VL-ID: ====================================...