Apache Hadoop Parameter Injection Vulnerability

Apache Hadoop is an open source distributed system infrastructure from the Apache Foundation. The product is capable of distributed processing of large amounts of data and is highly reliable, scalable, and fault-tolerant. Apache Hadoop has a security vulnerability that stems from its...

[SECURITY] Fedora 36 Update: golang-github-nats-io-streaming-server-0.20.0-6.fc36

NATS Streaming is an extremely performant, lightweight reliable streaming platform built on NATS...

[SECURITY] Fedora 36 Update: golang-github-nats-io-streaming-server-0.20.0-5.fc36

NATS Streaming is an extremely performant, lightweight reliable streaming platform built on NATS...

Naabu - A Fast Port Scanner Written In Go With A Focus On Reliability And Simplicity

Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT scans on the host/list of hosts and lists all ports that return a reply. Features Fast And Simple SYN/CONNECT probe...

Apache Flume remote code execution vulnerability

Apache Flume is a distributed, reliable and available service from the Apache Foundation. A remote code execution vulnerability exists in Apache Flume, which stems from the configuration of a JMS source with a JNDI LDAP data source URI, and could be exploited by an attacker to cause a remote code...

VMware Workspace ONE Access Template Injection / Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Workspace ONE Access CVE-2022-22954', 'Description' = %q This module exploits CVE-2022-22954, an unauthenticated server-side template...

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

Polkit pkexec Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Local Privilege Escalation in polkits pkexec', 'Description' = %q A bug exists in the polkit pkexec binary in how it processes arguments. If the...

QNAP Systems QUTS Hero Cross-Site Scripting Vulnerability

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

What is MQTT ❓ All you need to know.

Introduction Regardless of the application type, seamless information exchange between two points is a pivotal operational step. IoT or Internet of Things application development is on the rise and is not free from this crucial requirement. That’s where Message Queue Telemetry Protocol comes into...

Null Pointer Dereference Vulnerability in Multiple D-Link Products (CNVD-2021-94840)

The D-Link DAP-2310 is a single-band wireless network access point for small businesses or schools that need a fast and reliable wireless network.The D-Link DAP-2330 is a wireless N300 single-band PoE access point. A null pointer dereference vulnerability exists in multiple D-Link products, which...

Benefits of CI/CD for Your Software Development Company

By Waqas The benefits of CI/CD are numerous and allow companies to deliver software and updates faster and more reliably. This is a post from HackRead.com Read the original post: Benefits of CI/CD for Your Software Development Company...

reliable-macaca-slave (>=1.0.0 <=2.1.0), reliable-slave (>=1.0.0 <=1.0.3) potentially affected by CVE-2021-23381 via killing (=1.0.6)

killing NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: OSV:GHSA-CQ77-8JPX-892G...

USN-4875-1: OpenSMTPD vulnerabilities

It was discovered that OpenSMTPD incorrectly verified the sender's or receiver's e-mail addresses under certain conditions. An attacker could possibly use this vulnerability to execute arbitrary commands as root. CVE-2020-7247 It was discovered that OpenSMTPD did not properly handle hardlinks und...

KB5000859: Servicing stack update for Windows 10, version 1809: March 9, 2021

None None...

reliable-macaca-slave (>=1.0.0 <=2.1.0), reliable-slave (>=1.0.0 <=1.0.3) potentially affected by CVE-2021-23381 via killing (=1.0.6)

killing NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: SNYK:JS-KILLING-1078532...

Backup File Scanner (HTTP) - Reliable Detection Reporting

The script reports backup files left on the web server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Login to Another User with Su on Linux / Unix Systems

This module attempts to create a new login session by invoking the su command of a valid username and password. If the login is successful, a new session is created via the specified payload. Because su forces passwords to be passed over stdin, this module attempts to invoke a psuedo-terminal wit...

2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM

This is the second installment of our series around 2021 security planning. In part one, Rapid7 Detection and Response Practice Advisor Jeffrey Gardner offered tips and advice for ramping up annual security planning. In this installment, we’ll explore the importance of reliable and comprehensive...