Yahoo Asks DNI to De-Classify Email Scanning Order

Yahoo continues to seek high ground with regard to public reports that last year it scanned user email messages in compliance with a classified government order. General counsel Ron Bell yesterday sent a letter to Director of National Intelligence James R. Clapper asking the government to confirm...

Magento Community Edition 2.x Version Detection

Binary data 9691.prm...

Metasploit Web UI Static secret_key_base Value Exploit

This module exploits the Web UI for Metasploit Community, Express and Pro where one of a certain set of Weekly Releases have been applied. These Weekly Releases introduced a static secretkeybase value. Knowledge of the static secretkeybase value allows for deserialization of a crafted Ruby Object...

Magento Community Edition < 1.9.2.2 Multiple Vulnerabilities

Binary data 9678.prm...

Magento Community Edition < 1.7.0.1 XXE Injection

Binary data 9675.prm...

Magento Community Edition < 1.9.2.3 Multiple Vulnerabilities

Binary data 9679.prm...

Magento Community Edition Version Detection

Binary data 9674.prm...

Magento Community Edition Web Application Detection

Binary data 9673.prm...

Magento Community Edition < 1.9.2.1 Multiple Vulnerabilities

Binary data 9677.prm...

Fedora 23 : community-mysql (2016-bc0e4e3f5a)

Update to MySQL 5.6.33, for various fixes described at Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] Fedora 23 Update: community-mysql-5.6.33-1.fc23

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

Fedora Update for community-mysql FEDORA-2016-0901301dff

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Facebook Debuts Open Source Detection Tool for Windows

Facebook successfully ported its SQL-powered detection tool, osquery, to Windows this week, giving users a free and open source method to monitor networks and diagnose problems. The framework, which converts operating systems to relational databases, allows users to write SQL-based queries to...

Metasploit Web UI Static secret_key_base Value

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule NullSerializer @serializer = options:serializer || Marshal end def encryptandsignvalue...

Leaked NSA Hacking Tools Were 'Mistakenly' Left By An Agent On A Remote Server

If you are a hacker, you might have enjoyed the NSA's private zero-day exploits, malware and hacking tools that were leaked last month. But the question is: How these hacking tools ended up into the hands of hackers? It has been found that the NSA itself was not directly hacked, but a former NSA...

Metasploit Web UI - Diagnostic Console Command Execution Exploit

Exploit for multiple platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Metasploit Web UI Diagnostic Console Command Execution', 'Description...

Metasploit Web UI Diagnostic Console Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Metasploit Web UI Diagnostic Console Command Execution', 'Description' = %q This module exploits the "diagnostic console" featu...

Metasploit Web UI - Diagnostic Console Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Metasploit Web UI Diagnostic Console Command Execution', 'Description' = %q This module exploits the "diagnostic console" featu...

Cisco Small Business 220 Series Smart Plus Switches SNMP Unauthorized Access Vulnerability (cisco-sa-20160831-sps3)

A vulnerability in the implementation of SNMP functionality in Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to gain unauthorized access to SNMP objects on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...

[SECURITY] Fedora 24 Update: slock-1.3-2.fc24

This is the simplest X screen locker we are aware of. It is stable and quite a lot people in this community are using it every day when they are out with friends or fetching some food from the local pub...