Fedora Update for nspr FEDORA-2019-e4c45e113c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4178

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

Code injection

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

CVE-2010-4178

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

CVE-2010-4178

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

CVE-2010-4178

CVE-2010-4178 concerns a local information-disclosure in MySQL-GUI-tools (mysql-administrator): passwords are leaked into the process list when launching the MySQL text console. Multiple connected entries (SU SE, NVD, Ubuntu, CNVD, CNVD-like records) describe the vulnerability as a local informat...

PT-2019-6581

Name of the Vulnerable Software and Affected Versions MySQL-GUI-tools mysql-administrator affected versions not specified Description The issue concerns a password leak in the process list after launching the MySQL text console. Recommendations At the moment, there is no information about a newer...

CVE-2010-4178: Insufficiently Protected Credentials

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

CVE-2019-3864

A vulnerability was discovered in the Quay web GUI where POST requests include a specific parameter which is used as a CSRF token. The token is not refreshed for every request or when a user logged out and in again. An attacker could use a leaked token to gain access to the system using the user'...

Pockint - A Portable OSINT Swiss Army Knife For DFIR/OSINT Professionals

POCKINT a.k.a. Pocket Intelligence is the OSINT swiss army knife for DFIR/OSINT professionals. Designed to be a lightweight and portable GUI program to be carried within USBs or investigation VMs, it provides users with essential OSINT capabilities in a compact form factor: POCKINT's input box...

[SECURITY] Fedora 30 Update: cutter-re-1.9.0-1.fc30

Cutter is a Qt and C++ GUI for radare2. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

Verify JWT With JSON Web Key Set (JWKS) in API Gateway

JSON Web Tokens JWT use digital signatures to establish the authenticity of the data they contain, as well as authenticating the identity of the signer. A valid signature check ensures that any party can rely on the contents and the signatory of the JWT. This is typically accomplished by using an...

Remote code execution

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...

PT-2019-14990

Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows for pre-authentication remote code execution on the /var/WEB-GUI/cgi-bin/telnet.cgi endpoint. Recommendations For FiberHome HG2201T version 1.00.M5007 JS 201804, as a...

PT-2019-14991

Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows pre-authentication Directory Traversal for reading arbitrary files via the /var/WEB-GUI/cgi-bin/downloadfile.cgi API endpoint. Recommendations For FiberHome HG2201T...

DNS Rebinding Tool - DNS Rebind Tool With Custom Scripts

Inspired by @tavisio This project is meant to be an All-in-one Toolkit to test further DNS rebinding attacks and my take on understanding these kind of attacks. It consists of a web server and pseudo DNS server that only responds to A queries. The root index of the web server allowes to configure...

Cisco Small Business 220 Series - Multiple Vulnerabilities

!/usr/bin/python2.7 """ Subject Realtek Managed Switch Controller RTL83xx PoC 2019 bashis https://www.realtek.com/en/products/communications-network-ics/category/managed-switch-controller Brief description 1. Boa/Hydra suffer of exploitable stack overflow with a 'one byte read-write loop' w/o...

Code injection

In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. Prohibition of this zero value is only enforced within the GUI...

Fedora Update for qbittorrent FEDORA-2019-ce6c6de3cc

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-0365

SAP Kernel RFC, KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows BC-FES-GUI before versions 7.5, 7.6, and SAP GUI for Java...