com.github.ccweixiao:hbase-sdk-thrift-core_1.x (>=2.0.7, <=2.0.8), org.apache.hbase:hbase-assembly (>=1.4.0, <=1.4.4) +1 more potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (>=1.4.0, <=1.4.4)

org.apache.hbase:hbase-thrift MAVEN version =1.4.0, =2.0.7, =1.4.0, =1.4.0, =1.4.4 Source cves: CVE-2018-8025 Source advisory: OSV:GHSA-R86J-2GC6-2CQ9...

org.apache.hbase:hbase-examples (0.98.16-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.16-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.16-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.16-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.1-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.15-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.15-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.15-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.15-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.19-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.19-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.19-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.19-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.96.2-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.96.2-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.96.2-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.96.2-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-assembly (2.0.0), org.apache.hbase:hbase-examples (2.0.0) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (2.0.0)

org.apache.hbase:hbase-thrift MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-assembly 2.0.0 - org.apache.hbase:hbase-examples 2.0.0 Source cves:...

org.apache.hbase:hbase-examples (0.98.21-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.21-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.21-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.21-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.96.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.96.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.96.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.96.1-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.98.16.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.16.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.16.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.16.1-hadoop1 Source cves: CVE-2018-8025 Source...

org.apache.cxf.fediz.examples:jaxrsspringsecuritywebapp (>=1.3.0, <=1.3.2), org.apache.cxf.fediz.examples:springpreauthwebapp (>=1.1.0, <=1.3.2) +6 more potentially affected by CVE-2017-12631 via org.apache.cxf.fediz:fediz-spring (>=1.1.0, <=1.3.2)

org.apache.cxf.fediz:fediz-spring MAVEN version =1.1.0, =1.3.0, =1.1.0, =1.1.0, =1.2.0, =1.2.0, =1.1.0, =1.1.0, =1.1.0, =1.3.2 Source cves: CVE-2017-12631 Source advisory: OSV:GHSA-FV7X-4HPC-HF9F...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1331 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

com.github.intel-hadoop:gearpump-experiments-storm_2.11 (>=0.3.4, <=0.4.1), com.github.ptgoetz:flux (0.1.0) +3 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (0.9.3)

org.apache.storm:storm-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - com.github.intel-hadoop:gearpump-experiments-storm2.11 =0.3.4, =0.1.3, =0.0.13, =0.0.14 Source cves:...

org.apache.storm:flux-core (>=1.2.0, <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0, <=1.2.1) +14 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (>=1.2.0, <=1.2.1)

org.apache.storm:storm-core MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.1 and more Source cves: CVE-2018-8008 Source advisory: OSV:GHSA-898J-5CC8-CMF5...

Atlas - Quick SQLMap Tamper Suggester

Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code. Screen Installation $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py Usage $ python atlas.py --url http://site.com/index.php?id=PriceASC...

[SECURITY] Fedora 29 Update: yum-utils-1.1.31-517.fc29

yum-utils is a collection of utilities and examples for the yum package manager. It includes utilities by different authors that make yum easier and more powerful to use. These tools include: debuginfo-install, find-repos-of-install, needs-restarting, package-cleanup, repoclosure, repodiff,...

Running a security awareness program

So, you've finally convinced management of the need for security awareness training. What next? I’ve been performing security awareness training for around 10 years, and doing it full time here at PTP for the last 3 and a half years. From the thousands of sessions I have run I’ve found the most...