10565 matches found
Shomon - Shodan Monitoring Integration For TheHive
ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! Functionalities Can be used as Webhook OR Stream listener Webhook listener opens a restful API endpoint for Shodan to send alerts. This means you need to make this endpoint available to...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 aka text4shell PoC for recently discovered vu...
Fedora: Security Advisory for moby-engine (FEDORA-2022-12790ca71a)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: moby-engine-20.10.20-1.fc36
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 Python script for CVE-2022-42889 To test this...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 PoC Test Application This is a vulnerable appli...
Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-156)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-156 advisory. A bug was found in containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the ExecSync API. This...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 Test application This repository contains a si...
PenguinTrace - Tool To Show How Code Runs At The Hardware Level
penguinTrace is intended to help build an understanding of how programs run at the hardware level. It provides a way to see what instructions compile to, and then step through those instructions and see how they affect machine state as well as how this maps back to variables in the original...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889-POC A simple demo application that shows how to...
URL spoofing in password reset mail - ownCloud
The docker image of the ownCloud server contained a misconfiguration which rendered the ‘trusteddomains’ config useless. This could be abused to spoof the URL in password reset mails...
Amazon Linux 2 : containerd, docker (ALASDOCKER-2022-021)
The version of containerd installed on the remote host is prior to 1.6.6-1. The version of docker installed on the remote host is prior to 20.10.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2022-021 advisory. In net/http in Go before 1.18.6 and 1.19.x befor...
Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server
Summary Multiple vulnerabilities in Docker used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-24769 DESCRIPTION: Moby could allow a local attacker to gain elevated privileges on the system, caused by an issue with containers started incorrectly with...
Medium: containerd, docker
Issue Overview: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. CVE-2022-27664 Affected Packages: containerd, docker Note: This advisory is applicabl...
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2022-2427)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2022-2414)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EvilnoVNC - Ready To Go Phishing Platform
EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the entire browser...
EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2022-2414)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container c...