ASB-A-277740082

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-35248

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings...

Cloudera Manager =< 5.5 Enumerating user sessions with an unprivileged account (CVE-2016-4950)

Cloudera Manager =:7180/api/v11/users/sessions It is worth mentioning that a user using the API won’t appear in the “currently connected” user list. The Cloudera CERT indicated that this vulnerability is fixed in version 5.8. Moreover, Cloudera Manager =:7180/api/v1/users...

Nmap NSE net: stuxnet-detect

Detects whether a host is infected with the Stuxnet worm http://en.wikipedia.org/wiki/Stuxnet. An executable version of the Stuxnet infection will be downloaded if a format for the filename is given on the command line. SYNTAX: smbbasic: Forces the authentication to use basic security, as opposed...