Pseudo-Shell Post-Exploitation Module

This module will run a Pseudo-Shell. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'readline' class MetasploitModule Msf::Post include Msf::Post::File include Msf::Post::Unix include Msf::Post::Linux::System...

Security Bulletin: Information Disclosure Vulnerability in Tivoli Business Service Manager (CVE-2016-0286)

Summary Information about an information disclosure security vulnerability affecting Tivoli Business Service Manager TBSM is published in this security bulletin. Manipulation of communication between the TBSM Dashboard server and the TBSM Data Server could result in information disclosure...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Change (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Password in Clear Text vulnerability (CVE-2018-1377 )

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1377 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG stores user credentials in plain in clear text which can be read by a local user. CVSS...

Security Bulletin: IBM Security Guardium is affected by Password in Clear Text vulnerability (CVE-2017-1259)

Summary IBM Security Guardium transmits user credentials in plain in clear text which can be read by an attacker. IBM Security Guardium has provided a fix for this vulnerability. Vulnerability Details CVEID: CVE-2017-1259 DESCRIPTION: IBM Security Guardium transmits user credentials in plain in...

Security Bulletin: IBM QRadar SIEM is vulnerable to clear text passwords. (CVE-2016-9750)

Summary The software stores user or system passwords unencrypted which can allow attackers with file system access, the ability to escalate privileges, or to obtain access to other systems the software integrates with. Vulnerability Details CVEID: CVE-2016-9750 DESCRIPTION: IBM Qradar stores user...

Security Bulletin: IBM Security Key Lifecycle Manager stores unencrypted password (CVE-2016-6092)

Summary IBM Security Key Lifecycle Manager has identified a vulnerability where a password is stored in clear text. This vulnerability can enable attackers to obtain unauthorized access to other integrated systems. IBM Security Key Lifecycle Manager has addressed this vulnerability with the...

Security Bulletin: IBM Security Guardium is affected by Password in Clear Text vulnerability (CVE-2016-0247)

Summary IBM Security Guardium could allow a local user to obtain sensitive information including password information that would be transmitted in clear text. Vulnerability Details CVEID: CVE-2016-0247 DESCRIPTION: IBM Security Guardium could allow a local user to obtain sensitive information...

Security Bulletin: IBM QRadar SIEM is vulnerable to clear text passwords. (CVE-2016-2871)

Summary Some passwords in IBM QRadar SIEM were found in configuration files in clear text. Vulnerability Details CVE-ID: CVE-2016-2871 Description: IBM QRadar stores passwords in clear text in configuration files, that could allow a local user to obtain critical sensitive information and gain...

ABB IP Gateway Unauthorized Access Vulnerability (CNVD-2018-11991)

ABB IP GATEWAY is a building management system from ABB Switzerland. A security vulnerability exists in ABB IP GATEWAY version 3.39 and earlier, which originates from some configuration files containing passwords in clear text. An attacker could use this vulnerability to gain unauthorized access...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2018-11073)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform. The vulnerability arises from the software transmitting sensitive or safety critical data in clear text over a channel that can be sniff...

CVE-2018-1600

IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745...

CVE-2018-1600

IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745...

CVE-2018-1600

CVE-2018-1600 affects IBM BigFix Platform 9.2 and 9.5, where sensitive or security-critical data is transmitted in clear text over a network channel that can be sniffed by an attacker. The root cause is insecure plain-text transmission within the affected components. Documented impact includes po...

PT-2018-13340

Name of the Vulnerable Software and Affected Versions IBM BigFix Platform versions 9.2 through 9.5 Description The issue concerns the transmission of sensitive data in clear text through a communication channel, making it possible for unauthorized actors to intercept this data. Recommendations Fo...

tickets.thefoat.com XSS vulnerability

Open Bug Bounty ID: OBB-625160 Description| Value ---|--- Affected Website:| tickets.thefoat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cswithandroid.withgoogle.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-624221 Description| Value ---|--- Affected Website:| cswithandroid.withgoogle.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely invoke an executable file

Overview The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION contains an issue with the DLL search path, which may lead to insecurely invoke an executable file...

MMM mmm_agentd shell command injection vulnerability (CNVD-2018-15652)

MySQL Multi-Master Replication Manager MMM is a set of flexible scripts that performs monitoring/failover and management of MySQL master-master replication configurations. mmmagentd is an agent daemon that runs on each MySQL server and provides a simple set of remote services to the monitoring...

MMM mmm_agentd shell command injection vulnerability (CNVD-2018-15654)

MySQL Multi-Master Replication Manager MMM is a set of flexible scripts that performs monitoring/failover and management of MySQL master-master replication configurations. mmmagentd is an agent daemon that runs on each MySQL server and provides a simple set of remote services to the monitoring...