Fedora 31 : python-django (2020-adb4f0143a)

fix CVE-2019-19844 rhbz1788426 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Google Chrome < 79.0.3945.130 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 79.0.3945.130. It is, therefore, affected by multiple vulnerabilities as referenced in the 202001stable-channel-update-for-desktop16 advisory. - Insufficient policy enforcement in extensions in Google Chrome prior to...

Google Chrome < 79.0.3945.130 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 79.0.3945.130. It is, therefore, affected by multiple vulnerabilities as referenced in the 202001stable-channel-update-for-desktop16 advisory. - Insufficient policy enforcement in extensions in Google Chrome prior to...

PoC Exploits Published For Microsoft Crypto Bug

Two proof-of-concept PoC exploits have been publicly released for the recently-patched crypto-spoofing vulnerability found by the National Security Agency and reported to Microsoft. The vulnerability CVE-2020-0601 could enable an attacker to spoof a code-signing certificate necessary for validati...

Photon OS 1.0: Kubernetes PHSA-2020-1.0-0264

An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0264. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Ruby PHSA-2019-1.0-0263

An update of the ruby package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0263. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132968;...

KLA11647 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in speech recognizer can be...

Photon OS 1.0: Sysstat PHSA-2019-1.0-0263

An update of the sysstat package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0263. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Shell Backdoor List - PHP / ASP Shell Backdoor List

What is a shell backdoor ? A backdoor shell is a malicious piece of code e.g. PHP, Python, Ruby that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own. How to...

DRIVE.NET, Inc.: Testing for arbitrary HTTP methods

Test for allowed HTTP methods on the server. Below are the steps to reproduce it. Step 1. Navigate the url Step 2. Intercept the GET http request using burp suite Step 3. change GET to ABCD as shown in screenshot and forward this request to server Step 4. Observe the http response from the server...

Exploit for Use After Free in Linux Linux_Kernel

This repository contains various kernel exploits for Linux systems. The exploits target different vulnerabilities, including CVE-2016-8655, CVE-2017-1000112, CVE-2017-7308, and CVE-2018-18955, among others. The exploits are implemented in C and use various techniques, such as KASLR and SMEP/SMAP...

Siemens SINEMA Server

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINEMA Server Vulnerability: Incorrect Privilege Assignment 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with a valid session, with...

Unpatched Citrix Flaw Now Has PoC Exploits

Proof-of-concept PoC exploit code has been released for an unpatched remote-code-execution vulnerability in the Citrix Application Delivery Controller ADC and Citrix Gateway products. The vulnerability CVE-2019-19781, which Threatpost reported on in December, already packs a double-punch in terms...

CVE-2019-7238

creationtimestamp| type| source ---|---|--- 2020-01-13 11:32:24+00:00| published-proof-of-concept| https://t.me/antichat/7622 2020-10-09 14:02:27+00:00| seen| MISP/a7dc7e1f-c171-47fd-bf71-659164ee8d30 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04...

Fedora 31 : python36 (2019-a268ba7b23)

Python 3.6.10 is the latest security fix release of Python 3.6. Security fix for CVE-2019-16056, CVE-2019-16935. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...

PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability

It's now or never to prevent your enterprise servers running vulnerable versions of Citrix application delivery, load balancing, and Gateway solutions from getting hacked by remote attackers. Why the urgency? Earlier today, multiple groups publicly released weaponized proof-of-concept exploit cod...

Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution

!/usr/bin/python3 Exploits the Citrix Directory Traversal Bug: CVE-2019-19781 You only need a listener like netcat to catch the shell. Shout out to the team: Rob Simon, Justin Elze, Logan Sampson, Geoff Walton, Christopher Paschen, Kevin Haubris, Scott White Tool Written by: Rob Simon and David...

Threat spotlight: Phobos ransomware lives up to its name

Ransomware has struck dead on organizations since it became a mainstream tool in cybercriminals' belts years ago. From massive WannaCry outbreaks in 2017 to industry-focused attacks by Ryuk in 2019, ransomware's got its hooks in global businesses and shows no signs of stopping. That includes a...

Debian DSA-4600-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltration or cross-site scripting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Vulmap

This is a Python script for a local vulnerability scanner, specifically designed for Linux systems. The script, named Vulmap, is part of the Vulmap Local Vulnerability Scanners project. It scans the host for installed packages, queries the Vulmon API for vulnerabilities, and prints the results,...