pfSense pfBlockerNG 2.1.4_26 Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'pfSense plugin pfBlockerNG unauthenticated RCE as root', 'Description' = %q pfBlockerNG is a popular pfSense plugin that is not installed by...

Exploit for OS Command Injection in Telesquare Sdt-Cs3B1_Firmware

It is an exploit module for CVE-2021-46422, a remote code execut...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

PoC exploit for CVE-2022-26134, a remote code execution vulnerab...

Fedora: Security Advisory for golang-github-tklauser-numcpus (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-tklauser-numcpus-0.2.3-7.fc35

Go module to get the number of CPUs on a Linux/BSD system...

[SECURITY] Fedora 35 Update: golang-github-hpcloud-tail-1.0.0-10.20190325gita1dbeea.fc35

A Go package striving to emulate the features of the BSD tail program...

Fedora: Security Advisory for golang-github-hpcloud-tail (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-hpcloud-tail-1.0.0-10.20190325gita1dbeea.fc36

A Go package striving to emulate the features of the BSD tail program...

Malicious code in bsd-global-nav-design-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8363937f49377a77760b70632c87c41f4786925e36ba7d072aca7dcae2639da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1706 Malicious code in bsd-global-nav-design-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8363937f49377a77760b70632c87c41f4786925e36ba7d072aca7dcae2639da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ajenti 操作系统命令注入漏洞

ajenti is a Linux and BSD modular server management panel from ajenti open source. A security vulnerability exists in ajenti version 2.1.31, which stems from a problem with the component API. An attacker can exploit the vulnerability to achieve privilege escalation...

new packages: perl-BSD-Resource

An update is available for perl-BSD-Resource. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

FirmWire -b Full-System Baseband Firmware Emulation Platform For Fuzzing, Debugging, And Root-Cause Analysis Of Smartphone Baseband Firmwares

FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. See theFirmWire documentation to get started! Experiments & Missing Parts? Upon a vendor's request, the current...

The vulnerability of the bsd_glob function in the Perl programming language allows a hacker to trigger a service failure.

The vulnerability of the bsdglob function in the Perl programming language is related to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Fedora: Security Advisory for uriparser (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Master_Librarian - A Simple Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities

A simple tool to audit Unix/BSD/Linux system libraries to find public security vulnerabilities. To install requirements: $ sudo python3 -m pip install -r requirements.txt Overview: vulnerabilities on local libraries by CoolerVoid Example: $ python3 masterlibrarian.py -t csv $ python3...

pfSense 2.5.2 Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'pfSense Diag Routes Web Shell Upload', 'Description' = %q This module exploits an arbitrary file creation vulnerability in the pfSense HTTP...

phoronix-test-suite 跨站脚本漏洞

phoronix-test-suite is the most comprehensive testing and benchmarking platform for Linux, Solaris, macOS, Windows and BSD operating systems. A cross-site scripting vulnerability exists in phoronix-test-suite that stems from the presence of an XSS...

[SECURITY] Fedora 35 Update: wpa_supplicant-2.10-2.fc35

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

[SECURITY] Fedora 35 Update: uriparser-0.9.6-1.fc35

Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...