Make-and-Break

만들기-및-깨기 취약한 가상 머신 생성 및 익스플로잇 설명: 사용자 정의 가상 머신을 구축했으며, Ubuntu 18.04.1 및 Webmin 1.810을 실행합니다. CVE-2019-15107을 사용하여 Linux 시스템 관리 인터페이스의 백도어를 익스플로잇합니다. 개념 증명 --- Linux OSUbuntu 18.04.1가 배포되며, 여기에는 공격자가 시스템을 루트 레벨로 손상시킬 수 있는 보안 결함이 포함됩니다. SSH 서버 설치 Webmin 1.890 설치 사용자 이름deathstart과 비밀번호readytograduat...

[SECURITY] Fedora 44 Update: cockpit-367-1.fc44

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

EUVD-2017-15738

Malware in sbrugna...

CVE-2019-0159

Insufficient memory protection in the Linux Administrative Tools for IntelR Network Adapters before version 24.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2017-6684

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

Default credentials

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

CVE-2017-6684

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

CVE-2017-6684

Cisco Elastic Services Controller (ESC) contains an insecure default credentials vulnerability. An authenticated attacker could log in as the Linux admin user due to a default, weak, hard-coded password. Affected release: 21.0.0. The Cisco advisory notes there are no workarounds; it does not spec...

Cisco Elastic Services Controller Insecure Default Credentials Vulnerability

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user. The vulnerability is due to the existence of a default, weak, hard-coded password for the Linux admin user of an affected system. A successf...