rConfig <= 3.9.6 Multiple Vulnerabilities

rConfig is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mozilla Patches Critical Vulnerability

Mozilla has released security updates to address a vulnerability in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild. The Cybersecurity and Infrastructure Security...

Google Chrome < 79.0.3945.117 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 79.0.3945.117. It is, therefore, affected by a vulnerability as referenced in the 202001stable-channel-update-for-desktop advisory. - Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attack...

Google Chrome < 79.0.3945.117 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 79.0.3945.117. It is, therefore, affected by a vulnerability as referenced in the 202001stable-channel-update-for-desktop advisory. - Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote...

exploitdb-bin-sploits

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. It is intended to serve as the...

Photon OS 2.0: Tar PHSA-2019-2.0-0187

An update of the tar package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132546;...

Photon OS 2.0: Linux PHSA-2019-2.0-0191

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0191. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132536...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...

Exploit for CVE-2013-0422

K8tools 20191130 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 扫描工具 Ladon 5.7 大型内网渗透扫描神器内置40个功能,支持Cobalt Strike + 扫描工具 K8Cscan5.4 大型内网渗透扫描器内置30个功能,支持Cobalt Strike +...

Vxscan

This is a Python script called Vxscan, which is a comprehensive scanning tool. It is written in Python 3.6 or later and is designed to perform various scanning tasks, including sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system...

CVE-2018-11805

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party ....

Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2015-8704 and CVE-2015-8705).

Summary ISC BIND is vulnerable to several security vulnerabilities. Vulnerability Details CVEID: CVE-2015-8704 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticat...

CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance

Description of Problem A vulnerability has been identified in Citrix Application Delivery Controller ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway that, if exploited, could allow an unauthenticated attacker to perform arbitrary code execution. The scop...

Google Chrome < 79.0.3945.88 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 79.0.3945.88. It is, therefore, affected by a vulnerability as referenced in the 201912stable-channel-update-for-desktop17 advisory. - Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remo...

Google Chrome < 79.0.3945.88 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 79.0.3945.88. It is, therefore, affected by a vulnerability as referenced in the 201912stable-channel-update-for-desktop17 advisory. - Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote...

Multiple TIBCO Spotfire Products CVE-2019-17334 Remote Code Execution Vulnerability

Description Multiple TIBCO Spotfire Products are prone to a remote code-execution vulnerability. An attacker may leverage this issue to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. The following products are...

CVE-2019-19726

creationtimestamp| type| source ---|---|--- 2019-12-15 14:49:34+00:00| published-proof-of-concept| https://t.me/antichat/7350 2019-12-15 15:00:05+00:00| seen| https://t.me/canyoupwnme/6180 2019-12-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47780 2019-12-27 10:04:24+00:00|...

Microsoft Excel Information Leakage Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to compromise a user's computer or data with the help of specially crafted document files...

CVE-2018-11805

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party ....

CVE-2018-11805

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party ....