PT-2020-12967

Name of the Vulnerable Software and Affected Versions Apache NetBeans versions up to and including 12.0 Description The issue arises from the execution of build scripts to analyze gradle projects, which Apache NetBeans follows. This pattern causes the build script code to be invoked at project lo...

CVE-2020-11986: Undefined Security Weakness

To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to be invoked at load time of the project. Apache NetBeans up to and including 12.0 did not request consent from the user for the analysis o...

@alib/build-scripts (>=0.1.0-0, <=1.0.0-0), @alicd/cone-build-scripts (>=0.1.0, <=0.1.2) +220 more potentially affected by CVE-2020-7608 via yargs-parser (>=14.0.0, <=15.0.0)

yargs-parser NPM version =14.0.0, =0.1.0-0, =0.1.0, =0.1.1-1, =0.1.1-1, =0.1.1-1, =0.1.0, =0.3.1, =1.0.22-alpha.2, =1.3.0-alpha.1, =0.1.0-alpha.3, =0.1.7-alpha.1, =0.2.4-alpha.1, =0.3.4 and more Source cves: CVE-2020-7608 Source advisory: OSV:GHSA-P9PC-299P-VXGP...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments. It is an offensive tool for vulnerability research and testing. The target product/service or framework is not explicitly stated, but the repository contains various vulnerable environments, including Flask,...

@alib/build-scripts (>=0.1.0-0, <=1.0.0-0), @alicd/cone-build-scripts (>=0.1.0, <=0.1.2) +220 more potentially affected by CVE-2020-7608 via yargs-parser (>=14.0.0, <=15.0.0)

yargs-parser NPM version =14.0.0, =0.1.0-0, =0.1.0, =0.1.1-1, =0.1.1-1, =0.1.1-1, =0.1.0, =0.3.1, =1.0.22-alpha.2, =1.3.0-alpha.1, =0.1.0-alpha.3, =0.1.7-alpha.1, =0.2.4-alpha.1, =0.3.4 and more Source cves: CVE-2020-7608 Source advisory: MEND:CVE-2020-7608...

razzer

It is an offensive tool for Linux kernel exploitation. The primary CVE ID is not explicitly mentioned in the provided context, but the tool is designed to exploit kernel vulnerabilities, particularly those related to race conditions. The tool, named Razzer, is a kernel fuzzer that uses a modified...

CVE-2017-3160

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity...

CVE-2017-3160

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity...

CVE-2017-3160

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity...

PT-2018-7228

Name of the Vulnerable Software and Affected Versions: Cordova-Android versions prior to 6.1.2 Description: The issue arises when the Android platform is added to Cordova for the first time or after a project is created using the build scripts. The scripts fetch Gradle on the first build, but sin...

CVE-2017-3160: Undefined Security Weakness

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity...

Information Disclosure

gatsby is vulnerable to information disclosure. Absolute paths of the build machine can be leaked in the source map files when gatsby build scripts are executed, exposing sensitive information such as the current user name...

AntiVirus Evasion Tool: AVET

AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques. What & Why: when running an exe file made with msfpayload & co, the exe file will often be recognized by the antivirus software avet is a antivirus...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description SECURITY-170 / CVE-2016-3721 Arbitrary build parameters are passed to build scripts as environment variables SECURITY-243 / CVE-2016-3722 Malicious users with multiple user accounts can prevent other users from logging in SECURITY-250 / CVE-2016-3723...

Kali Linux NetHunter

Official Offensive Security have obsessively been building Kali on weird and wonderful ARM hardware and today, we are proud to reveal their latest creation – the Kali Linux NetHunter. NetHunter is a Android penetration testing platform for Nexus devices built on top of Kali Linux, which includes...

Kali NetHunter 3.0 - Android Mobile Penetration Testing Platform

What’s New in Kali NetHunter 3.0 NetHunter Android Application Rewrite The NetHunter Android application has been totally redone and has become much more “application centric”. Many new features and attacks have been added, not to mention a whole bunch of community-driven bug fixes. The NetHunter...

CVE-2009-0180

Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376...

CVE-2009-0180

Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376...