Amazon Linux 2 : ibus (ALAS-2020-1555)

The version of ibus installed on the remote host is prior to 1.5.17-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1555 advisory. A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due...

KITT-Lite

This is a Python-based pentesting CLI tool. The tool is designed to extract WPS Wi-Fi Protected Setup pins from vulnerable routers. It uses various tools such as Piexiewps, Reaver, Bully, Aircrack Suite, and Wash in an automated way to achieve its goal. The tool is likely used for penetration...

Unspecified Vulnerability in Oracle Enterprise Communications Broker

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in the WebGUI component in Oracle Enterprise Communications Broker 3.0.0-3.2.0. An attacker could exploit the...

The vulnerability of the graphical interface of the Gnome Display Manager in the Fedora operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Gnome Display Manager graphical interface on the Fedora operating system is related to insufficient authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the graphical interface of the Cisco Content Security Management Appliance allows attackers to redirect users to arbitrary websites and carry out phishing attacks using specially crafted URLs.

The vulnerability of the graphical interface of the Cisco Content Security Management Appliance software for content management systems involves the redirection of URLs to insecure websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites and carry o...

Fedora: Security Advisory for gnuchess (FEDORA-2020-3eaf264c4b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: gnuchess-6.2.6-1.fc30

The gnuchess package contains the GNU chess program. By default, GNU chess uses a curses text-based interface. Alternatively, GNU chess can be used in conjunction with the xboard user interface and the X Window System for play using a graphical chess board. Install the gnuchess package if you wou...

[SECURITY] Fedora 32 Update: gnuchess-6.2.6-1.fc32

The gnuchess package contains the GNU chess program. By default, GNU chess uses a curses text-based interface. Alternatively, GNU chess can be used in conjunction with the xboard user interface and the X Window System for play using a graphical chess board. Install the gnuchess package if you wou...

[SECURITY] Fedora 31 Update: htmldoc-1.9.7-1.fc31

HTMLDOC converts HTML source files into indexed HTML, PostScript, or Portable Document Format PDF files that can be viewed online or printed. With no options a HTML document is produced on stdout. The second form of HTMLDOC reads HTML source from stdin, which allows you to use HTMLDOC as a filter...

CAINE 11 - GNU/Linux Live Distribution For Digital Forensics Project, Windows Side Forensics And Incident Response

CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni Bassetti Bari - Italy. CAINE offers a complete forensic environment that is organized to integrate existing software tools as...

CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...

CVE-2019-14822

A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface...

Intel Omni-Path Fabric Manager GUI Authorization Issues Vulnerability

Intel Omni-Path Fabric Manager GUI is a graphical interface for Intel Omni-Path Fabric communication fabric management from Intel Corporation USA. The Intel Omni-Path Fabric Manager GUI is vulnerable to an authorization issue. An attacker could exploit this vulnerability to elevate privileges...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software is related to deficiencies in access control, allowing attackers to disclose protected information.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to view configuration information in text format through the graphical user interface...

CVE-2018-7825

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...

CVE-2019-10712

The Web-GUI on WAGO Series 750-88x 750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889 and Series 750-87x 750-830, 750-849, 750-871, 750-872, 750-873 devices has undocumented service access...

CVE-2019-3612

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line...

Kage - Graphical User Interface For Metasploit Meterpreter And Session Handler

Kage ka-geh is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads. For now it only supports windows/meterpreter & android/meterpreter Getting Started Please follow these instructions to get a copy of Kage running on your local...

The vulnerability of the TACACS authentication system of the Cisco Wireless LAN Controller allows a perpetrator to execute arbitrary commands in the graphical interface, commands that are not available in the standard command line.

The vulnerability of the TACACS authentication system of the Cisco Wireless LAN Controller is due to defects in the authentication mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands in the graphical interface, commands that are not available through the...

The vulnerability of the Rgui graphical interface, related to buffer overflow in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Rgui graphical interface is related to buffer overflow in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted localization file...