PT-2020-22895

Уязвимость программного обеспечения для входа в систему GUI fly-qdm связана с отсутствием предупреждения об использовании устаревшего пароля при изменении истекшего пароля. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, получить доступ к конфиденциальным данным...

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Xerror - Fully Automated Pentesting Tool

Xerror is an automated penetration tool , which will helps security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts. Xerror provides GUI easy to use menu driven options.Iinternal...

CentOS: Security Advisory for qt5-qtbase (CESA-2020:5021)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

A10 Networks ACOS/aGalaxy GUI RCE (A10-2020-0006)

According to its self-reported version number, the remote A10 appliance is affected by a remote code execution vulnerability in the management Graphical User Interface GUI. An unauthenticated, remote attacker with access to a management interface can exploit this to execute arbitrary code on the...

CVE-2020-24384

A10 Networks ACOS and aGalaxy management Graphical User Interfaces GUIs have an unauthenticated Remote Code Execution RCE vulnerability that could be used to compromise affected ACOS systems. ACOS versions 3.2.x including and after 3.2.2, 4.x, and 5.1.x are affected. aGalaxy versions 3.0.x, 3.2.x...

Remote code execution

A10 Networks ACOS and aGalaxy management Graphical User Interfaces GUIs have an unauthenticated Remote Code Execution RCE vulnerability that could be used to compromise affected ACOS systems. ACOS versions 3.2.x including and after 3.2.2, 4.x, and 5.1.x are affected. aGalaxy versions 3.0.x, 3.2.x...

CVE-2020-24384

The CVE-2020-24384 issue affects A10 Networks ACOS and aGalaxy GUI with an unauthenticated Remote Code Execution (RCE) vulnerability that could compromise affected systems. Affected software: ACOS (versions 3.2.x including 3.2.2+, 4.x, 5.1.x) and aGalaxy (versions 3.0.x, 3.2.x, 5.0.x). The vulner...

Moderate: Red Hat Security Advisory: qt and qt5-qtbase security update

An update for qt and qt5-qtbase is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2020-24384: Undefined Security Weakness

A10 Networks ACOS and aGalaxy management Graphical User Interfaces GUIs have an unauthenticated Remote Code Execution RCE vulnerability that could be used to compromise affected ACOS systems. ACOS versions 3.2.x including and after 3.2.2, 4.x, and 5.1.x are affected. aGalaxy versions 3.0.x, 3.2.x...

TestWER (Test Windows Error Reporting)

TestWER Test Windows Error Reporting Version 2.0 Created Date: 12/06/2006 Updated Date: 02/02/2011 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide...

WindowHistory Tool

Created Date: 03/22/2006 Updated Date: 09/29/2017 Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Navigate to your platform: WindowHistory64 4.0 for x64 Platforms| WindowHistory 4.0 for...

WindowHistory Tool

Created Date: 03/22/2006 Updated Date: 09/29/2017 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Navigate to your...

Citrix RDSWatcher

Description RDSWatcher is an advanced Remote Desktop Services session state monitor and logger. It watches all sessions on any Windows machine and logs all session state changes with time stamp as accurately as twice a second. RDSWatcher provides the connection status of current sessions and is...

CVE-2020-26506

An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI...

Metasploit Wrap-Up

Keep your eyes peeled for another Metasploit CTF We hosted our third Annualish Metasploit CTF back in January of this year. All 1,000 slots were booked within days of announcing the competition. Because of the resounding success, we'll be hosting the fourth Annualish Metasploit CTF by year’s end...

PT-2020-19769 · Dat · Dat.Gui

Name of the Vulnerable Software and Affected Versions: dat.gui versions prior to a fixed version Description: The issue is related to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values. This can be exploited in all versions of the package dat.gui...

[SECURITY] Fedora 32 Update: kleopatra-19.12.2-2.fc32

KDE certificate manager and unified crypto GUI...

CVE-2020-26947

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...

CVE-2020-26947

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...