Scanvus – my open source Vulnerability Scanner for Linux hosts and Docker images

Hello everyone! This video was recorded for the VMconf 22 Vulnerability Management conference, vmconf.pw. I will be talking about my open source project Scanvus. This project is already a year old and I use it almost every day. Alternative video link for Russia: Scanvus Simple Credentialed...

UBUNTU-CVE-2022-31143

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. It was found that in affected versions there is an exposure of private information defined in setup of...

Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-7401 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue concerns the exposure of private information defined in the setup of GLPI, such as smtp or cas hosts, to unauthorized individuals. This exposure can be exploited remotely, allowing attacker...

Malicious code in dep-incompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb537c14147bd009ef50b49f0aa9e6c60e693c01b44667d8b8ce0e9a295fbbe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in root-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4cdbe0d6fcda449039e24f1428363107212d964420e5db8a9b3df2090e9e043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2022-1887 python-reportlab security update

The ReportLab Toolkit. An Open Source Python library for generating PDFs and graphics. Security Fixes: All versions of package reportlab are vulnerable to Server-side Request Forgery SSRF via img tags. In order to reduce risk, use trustedSchemes & trustedHosts see in Reportlab's documentation Ste...

Malicious code in jembot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fa34be5adeea13d20b8067e7e92d24bf893272a43504ecf7057c205e3ab5815 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rekono - Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically

Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced...

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Malicious code in google-iot-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-9174 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: A flaw was found in the Foreman project, specifically in the Datacenter plugin, which exposes the password through the API to an authenticated local attacker with view hosts permission. Thi...

U.S. Dept Of Defense: Host Header Injection on https://███/████████/Account/ForgotPassword

Dear DoD Team, I found one high bug on your another domain. This is from Hack US Program. Affected domain is https://█████/ An attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on...

Malicious code in synfc-wrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb213d25fa208b2ce2da3a72504782d3e07e9fe3cab555626dcabf535760a89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rollup-pulgin-comsonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e311c145a9753f0b9cb137dddc9e3bffb27b6cb502240c2b697d2028267ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in om-helers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f9a93e537b606ceb960bbf61b0d502d85663ffc0b57b50e4525329103a3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in path-to-reugep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e39404a1b450825b3150aacf79e5eaa18352085ba8ffd47c1cd8a4743bda371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lefko-pd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78aaf506f6e99d6e64b0e74f83617500cdcd072a44a88caedc29a1a847fbbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lkodash.isequa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09912439b85d640c788cfbb7169f63fb99ba6b8425a0c45db58402d89fe15f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...