F5 BIG-IP and F5 Enterprise Manager Information Disclosure Vulnerability

F5 BIG-IP and F5 Enterprise Manager are both products of F5 Corporation, U.S.A. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 Enterprise Manager is an application delivery platform that provides a...

Security Bulletin:IBM Content Navigator is affected by a cross site scripting vulnerability

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4571 DESCRIPTION: IBM Content Navigator is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

Vxscan

This is a Python script called Vxscan, which is a comprehensive scanning tool. It is primarily used for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, and SQL injection. T...

Before He Spammed You, this Sly Prince Stalked Your Mailbox

A reader forwarded what he briefly imagined might be a bold, if potentially costly, innovation on the old Nigerian prince scam that asks for help squirreling away millions in unclaimed fortune: It was sent via the U.S. Postal Service, with a postmarked stamp and everything. In truth these old...

Emotet is back: botnet springs back to life with new spam campaign

After a fairly long hiatus that lasted nearly four months, Emotet is back with an active spam distribution campaign. For a few weeks, there were signs that the botnet was setting its gears in motion again, as we observed command and control C2 server activity. But this morning, the Trojan started...

CVE-2019-1289

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions, aka 'Windows Update Delivery Optimization Elevation of Privilege Vulnerability'...

CVE-2019-1289

CVE-2019-1289 is a Windows vulnerability described as an elevation of privilege in Windows Update Delivery Optimization caused by improper enforcement of file share permissions. Affected: Windows Update Delivery Optimization component. Impact: local privilege escalation with integrity impact (I:H...

CVE-2019-14997

The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN...

Windows Update Delivery Optimization Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions. An attacker who successfully exploited the vulnerability could overwrite files that require higher privileges than what the attacker already has. To explo...

KLA11552 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of...

KB4516068: Windows 10 Version 1703 September 2019 Security Update

The remote Windows host is missing security update 4516068. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

PT-2019-3305 · Microsoft · Windows Update Delivery Optimization +1

Name of the Vulnerable Software and Affected Versions: Windows Update Delivery Optimization affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Update Delivery Optimization, which does not properly enforce file share...

KB4516058: Windows 10 Version 1803 September 2019 Security Update

The remote Windows host is missing security update 4516058. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

Mail.ru: CSRF in attach phone API endpoint on delivery-club.ru

Legacy delivery-club.ru API endpoint allowed to attach arbitrary phone without checking the validation code and without additional CSRF protection...

Apache Traffic Control Authentication Vulnerability

Apache Traffic Control is the United States Apache Apache Software Foundation of a distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. An authentication vulnerability exists in Apache Traffic Control, which stems from...

openSUSE Security Update : exim (openSUSE-2019-2093)

exim was updated to fix a security issue : - CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process where a remote attacker could execute code with root privileges by sending crafted SNI data boo1149182. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Security update for exim (important)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2019:2093-1 Rating: important References: 1149182 Cross-References: CVE-2019-15846 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: exim wa...

UPDATE: Kali Linux 2019.3 Release

PenTestIT RSS Feed Kali Linux 2019.3, the latest and the greatest Kali Linux release is now officially available! This is the third 2019 release, which comes after Kali Linux 2019.2. This release includes the normal bugs fixes, updates the kernel to version 5.2.9, and includes various new feature...

Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Docker (CVE-2018-15664)

Summary A Security Vulnerability affects IBM Cloud Private - Docker CVE-2018-15664 Vulnerability Details CVEID: CVE-2018-15664 DESCRIPTION: Docker could allow a remote attacker to traverse directories on the system, caused by symlink-exchange race attacks in docker cp. By allowing the execution o...

CB TAU Threat Intelligence Notification: Sodinokibi Ransomware

Sodinokibi otherwise known as Sodin or REvil is a ransomware variant that has recently been observed evolving its delivery techniques, leveraging fake antivirus software and PowerShell droppers. This malware appears to be related to GandCrab and is likely a result of their operation closing up...