Photon OS 2.0: Net PHSA-2019-2.0-0118

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0118. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122025;...

Photon OS 1.0: Linux PHSA-2017-0029

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121724;...

Photon OS 1.0: Linux PHSA-2017-0022

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0022. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121706;...

Photon OS 2.0: Redis PHSA-2018-2.0-0070

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0070. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121964...

Photon OS 1.0: Python2 PHSA-2018-1.0-0178

An update of the python2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0178. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libxml2 PHSA-2017-0029

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121723;...

Photon OS 2.0: Perl PHSA-2018-2.0-0084

An update of the perl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0084. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121982;...

Photon OS 1.0: Binutils PHSA-2017-0010

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121676;...

Photon OS 2.0: Systemd PHSA-2018-2.0-0026

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

exploit

This is an offensive tool for Exploits & Shellcodes. It is a repository of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. The repository is a collection of exploits, shellcodes, and papers gathered through direct...

SpeakUp Linux Backdoor Sets Up for Major Attack

LAS VEGAS — A backdoor trojan dubbed “SpeakUp” has been spotted exploiting the Linux servers that run more than 90 percent of the top 1 million domains in the U.S. It uses a complex bag of tricks to infect hosts and to propagate, which analysts say could indicate that it’s poised for a major...

TheMoon Rises Again, With a Botnet-as-a-Service Threat

TheMoon, an IoT botnet targeting home routers and modems, is entering a new phase, as it were: It has added a previously undocumented module that allows it to be sold as-a-service to other malicious actors. This has already had significant real-world consequences, according to CenturyLink Threat...

Fedora 29 : moodle (2019-d8ec88b21e)

Multiple CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...

JBoss Remoting RemoteMessageChannel DoS (intrusive check)

A denial of service DoS vulnerability exists in JBoss Remoting due to the way RemoteMessageChannel, introduced in version 3.3.10.Final-redhat-1, reads from an empty buffer. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to cause the JBoss Remoting...

Japanese Government Will Hack Citizens' IoT Devices

The Japanese government is going to run penetration tests against all the IoT devices in their country, in an effort to 1 figure out what's insecure, and 2 help consumers secure them: The survey is scheduled to kick off next month, when authorities plan to test the password security of over 200...

CVE-2019-1652

creationtimestamp| type| source ---|---|--- 2019-01-24 16:19:27+00:00| seen| MISP/5c49e52d-6db8-4f3c-b0c6-4c5b0a021402 2019-01-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46243 2019-01-28 15:19:02+00:00| seen| MISP/5c4f1cd3-4e30-476b-9bf5-1a630a021402 2019-01-29...

Fedora 28 : gnupg2 (2019-e70c729d8a)

Minor update to upstream version 2.2.12 fixing moderate security issue and other bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fallout EK Retools for a Fresh New 2019 Look

A new version of the Fallout exploit kit EK has emerged, featuring new exploits and fresh payloads, including the GandCrab ransomware. The development shows that EKs have a lot of life yet left in them, researchers say. The Fallout EK generally finds its victims by way of malvertising campaigns,...

SUSE-SU-2019:0126-1 Security update for openssh

This update for openssh fixes the following issues: Security issues fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions bsc1121571 - CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to...

exploitdb-bin-sploitsss

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. It is intended to serve as the...