The vulnerability of the New Process Group Handler component in the Apache NiFi data processing platform allows a hacker to gain unauthorized access to read, modify, or delete data.

The vulnerability of the New Process Group Handler component in the Apache NiFi data processing platform is related to the improper use of intermediaries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to read, modify, or delete data...

Environment variables still accessible through /proc

Impact Environment variables can be read from procfs unless a new process is started. PoC use birdcage::Birdcage, Sandbox; use std::env, fs; fn main Birdcage::new.lock.unwrap; asserteq!env::varos"SECRET", None; let environ = fs::readtostring"/proc/self/environ".unwrap;...

Audix - A PowerShell Tool To Quickly Configure The Windows Event Audit Policies For Security Monitoring

Audix will allow for the SIMPLE configuration of Windows Event Audit Policies. Window's Audit Policies are restricted by default. This means that for Incident Responders, Blue Teamers, CISO's & people looking to monitor their environment through use of Windows Event Logs, must configure the audit...

PT-2017-14685 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12.10 Description: A local attacker can achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program due to the mm init function in kernel/fork.c not clearing the...

Reputation of Windows Executables: Never seen process(es)

Binary data neverseenprocessbefore.nbin...

[Process Magic v2.0] Command-line Tool to Hide Windows Application or Launch New Process in Hidden Mode

Process Magic is the command-line tool to Hide any Windows application or launch new application in Hidden or Invisible mode. In addition to hiding any Windows process, it also allows you to Unhide any previously Hidden application. Note that it hides the application by hiding its main window. So...