CVE-2019-10448

CVE-2019-10448 affects the Jenkins Extensive Testing Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. This allows disclosure to anyone with Extended Read permission or with access to the master file system. The core issue is plaintext credential stor...

CVE-2019-10448

Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10448: Insufficiently Protected Credentials

Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

PT-2019-11842 · Jenkins · Jenkins Extensive Testing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Extensive Testing Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master. Users with Extended Read permission or...

McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service - What The Code Tells Us

McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – What The Code Tells Us By McAfee Labs · October 2, 2019 Episode 1: What the Code Tells Us McAfee’s Advanced Threat Research team ATR observed a new ransomware family in the wild, dubbed Sodinokibi or REvil, at the end of April 201...

Hackers steal Amazon sellers’ funds in “extensive” attack

By Uzair Amir Amazon says it was a "serious" attack targeting 100s of sellers. The American e-commerce and technology giant Amazon.com, Inc. has announced that it was hit by a fraud attack in which unknown hackers targeted over 100 sellers stealing their earnings they made through sales or loans...

Lynis 2.6.7 - Security Auditing Tool for Unix/Linux Systems

We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...

PoshC2

!PoshC2 Logohttps://raw.githubusercontent.com/nettitude/PoshC...

Automating Cracking Methodologies Through Hashcat: hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team. Installation Get the latest hashcat binaries https://hashcat.net/hashcat/ OSX Install https://www.phillips321.co.uk/2016/07/09/hashcat-on-os-x-getting-it-going/ mkdir -p hashcat/deps git clone...

Android commercial spyware

There's certainly no shortage of commercial spying apps for Android, with most positioned as parental control tools. In reality, however, these apps barely differ from spyware, with the exception perhaps of the installation method. There's no need to even resort to Tor Browser or other darknet...

[SECURITY] Fedora 24 Update: owasp-java-html-sanitizer-20160422.1-1.fc24

A fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while protecting against XSS. The code was written with security best practices in mind, has an extensive test suite, and has undergone adversarial security...

[SECURITY] Fedora 20 Update: texlive-2013-6.20131226_r32488.fc20

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

Lynis 1.5.9 - Security auditing tool for Unix/Linux systems

Lynis is an open source security auditing tool. Primary goal is to help users with auditing and hardening of Unix and Linux based systems. The software is very flexible and runs on almost every Unix based system including Mac. Even the installation of the software itself is optional! How it works...

[SECURITY] Fedora 19 Update: xinetd-2.3.15-8.fc19

Xinetd is a secure replacement for inetd, the Internet services daemon. Xinetd provides access control for all services based on the address of the remote host and/or on time of access and can prevent denial-of-access attacks. Xinetd provides extensive logging, has no limit on the number of serve...

phpcms-2 0 0 8-pass to kill the injection-vulnerability warning-the black bar safety net

0×0 1 leading edge Phpcms2008 is a paragraph based on PHP+Mysql architecture of the web content management system, it is an open-source PHP development platform. Phpcms uses a modular approach to the development, functional and easy to use to facilitate the expansion, for medium to large sites...

[SECURITY] Fedora 16 Update: xinetd-2.3.14-47.fc16

Xinetd is a secure replacement for inetd, the Internet services daemon. Xinetd provides access control for all services based on the address of the remote host and/or on time of access and can prevent denial-of-access attacks. Xinetd provides extensive logging, has no limit on the number of serve...

TradeSE (all version) - (SQL/XSS) Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================== TradeSE all version - SQL/XSS Multiple Vulnerabilities ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

WinFTP Server 1.6 Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== WinFTP Server 1.6 Denial of Service Exploit =========================================== !/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1...