UPDATE: Sysdig Falco v0.15.0

PenTestIT RSS Feed Three days ago, an updated version – Sysdig Falco v0.15.0 – was released. It has been some time since I last blogged about this open source behavorial activity monitor which has container support. This release incorporates a lot of rule updates that are now also tagged the for...

Cisco Prime Infrastructure Health Monitor HA TarArchive - Directory Traversal / Remote Code Execution

!/usr/bin/python """ Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal Remote Code Execution Vulnerability Steven Seeley mrme of Source Incite - 2019 SRC: SRC-2019-0034 CVE: CVE-2019-1821 Example: ======== saturn: mrme$ ./poc.py + usage: ./poc.py + eg: ./poc.py...

EulerOS Virtualization for ARM 64 3.0.1.0 : libvirt (EulerOS-SA-2019-1394)

According to the versions of the libvirt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest ...

Apache Tomcat 7.0.x < 7.0.82 RCE

Binary data 700675.pasl...

Apache Tomcat 8.5.x < 8.5.31 Denial of Service

Binary data 700694.pasl...

Apache Tomcat 7.0.x < 7.0.75 NIO HTTP Connector Information Disclosure

Binary data 700671.pasl...

Apache Tomcat 8.5.x < 8.5.41 DoS Vulnerability

Binary data 700697.pasl...

Workspace App for MacOS Session disconnects after plugging or unplugging second monitor

ICA Session disconnects The Store Session might disconnect as well. Citrix Viewer quit unexpectedly messages - Log entries indicating encoding termination in CDF traces: 10:27:20:45265,24408,25036,50,twencode,twencode.cpp,116,TwTerminateEncoder,1,Information,"TwTerminateEncoder","" vda-1.csv 3163...

CVE-2018-5179

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60...

openSUSE Security Update : qemu (openSUSE-2019-1274)

This update for qemu fixes the following issues : Security issues fixed : - CVE-2019-9824: Fixed information leak in slirp bsc1129622. - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 hostinformation bsc1126455. - CVE-2019-3812: Fixed Out-of-bounds memory access and...

PRTG Network Monitor < 19.1.49.1966 Multiple Vulnerabilities

PRTG Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

This Week in Security News: Medical Malware and Monitor Hacks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn how baby monitors may be susceptible to hacking. Also, learn about a medical flaw that enables hackers to hide malware. Read on: Is Yo...

[SECURITY] Fedora 30 Update: gnome-system-monitor-3.32.1-2.fc30

gnome-system-monitor allows to graphically view and manipulate the running processes on your system. It also provides an overview of available resourc es such as CPU and memory...

Is Your Baby Monitor Susceptible to Hacking?

There’s no doubt that digital technology, in many of its forms, brings everyday tasks much closer-to-hand. From discovering breaking news, to online shopping, to keeping tabs on your home via security cameras—everything is within the touch of a button. Even so, with the growing reach of the...

UPDATE: Sysdig Falco v0.14.0

PenTestIT RSS Feed Recently, an updated version - Sysdig Falco v0.14.0 - was released. It has been some time since I last blogged about this open source behavorial activity monitor which has container support. What is Sysdig Falco? Sysdig Falco is an open source, behavioral activity monitor...

PT-2019-2871

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to a lack of authentication check in the web interface of the FortiOS operating system. This can be exploited by a remote attacker to perform a cross-site request forgery...

Step 8. Protect your documents and email: top 10 actions to secure your environment

The “Top 10 actions to secure your environment” series outlines fundamental steps you can take with your investment in Microsoft 365 security solutions. In “Step 8. Protect your documents and email,” you’ll learn how to deploy Azure Information Protection and use Office 365 Advanced Threat...

CVE-2018-19113

The Pronestor PNHM aka Health Monitoring or HealthMonitor add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:IF" permissions for the "%PROGRAMFILESX86%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse...

Exploit for OS Command Injection in Paessler Prtg_Network_Monitor

CVE-2018-9276 PRTG 18.2.39 Authenticated Command Injection...

Unspecified Vulnerability in Apple macOS Mojave IOGraphics

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.IOGraphics is one of the input and output graphics components. An unspecified vulnerability exists in the IOGraphics component in Apple macOS Mojave versions prior to 10.14.4, which stems from the Mac's...