12511 matches found
PT-2019-13749
Name of the Vulnerable Software and Affected Versions Q before 2019-08-02 Description The issue allows web sites to execute arbitrary code on client machines. This can be demonstrated by a cross-origin /install request with an attacker-controlled releaseUrl, which triggers download and execution ...
CVE-2017-18454
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface SEC-262...
CVE-2017-18454
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface SEC-262...
PT-2019-8389
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.24 Description The issue allows for stored XSS in the WHM cPAddons install interface. Recommendations For versions prior to 62.0.24, update to version 62.0.24 or later to resolve the issue...
Fedora Update for dtkwidget FEDORA-2019-3d418f349c
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Malicious Package
Overview All versions of anarchy contain malicious code. The package ran rm - rf / as an install script. Recommendation Remove the package from your environment. References GitHub Advisory...
Exploit for OS Command Injection in Exim
StickyExim !https://bretstaton.com/images/articleimages/ex...
CVE-2019-11697
If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed without the install prompt delay that keeps the prompt visible in order for users to accept or decline the installation. A malicious web page could use this with spoofing on th...
GitGot - Semi-automated, Feedback-Driven Tool To Rapidly Search Through Troves Of Public Data On GitHub For Sensitive Secrets
GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of results. Users...
PT-2019-4365
Name of the Vulnerable Software and Affected Versions ONOS versions 2.0.0 and earlier Description The issue is related to poor input validation, which can be exploited by a network administrator or an attacker to install unintended flow rules in the switch. The createFlow and createFlows function...
Malicious Package
ali-contributor is a malicious package. The malicious package runs a pre-install script, load.js, that would upload system information to a remote server, and subsequently downloads and executes a file...
Fedora Update for libvirt FEDORA-2019-b2dfb13daf
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
DEBIAN-CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
UBUNTU-CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
CVE-2019-13313
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
CVE-2019-13313: Exposure of Sensitive Information to an Unauthorized Actor
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
PT-2019-13249 · Open Source +4 · Libosinfo +4
Name of the Vulnerable Software and Affected Versions: libosinfo version 1.5.0 Description: The issue allows local users to discover credentials by listing a process. This occurs because credentials are passed to osinfo-install-script via the command line. There is no information available about...
Slackor - A Golang Implant That Uses Slack As A Command And Control Server
A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be sure to read and understand the Slack App Developer Policy before creating any Slack apps. Setup Note: The server is written in Python ...