vulscan

This is a Python-based web application for vulnerability scanning and management. The application is built using Django and has several features, including: 1. Vulnerability Scanning: The application can scan for vulnerabilities in web applications using a variety of plugins POCs. 2. Vulnerabilit...

MDR Must-Haves, Part 6: Threat Validation and Detailed Reporting

This blog post is part of an ongoing series about evaluating Managed Detection and Response MDR providers. For more insights, check out our guide, “10 Things Your MDR Service Must Do.” Engaging a managed security service provider—either a traditional MSSP or MDR provider—should never involve...

Security Bulletin: Multiple security vulnerabilities in IBM® Java SDK Oct 2020 and January 2021 CPU plus CVE-2020-14781, CVE-2020-14782, CVE-2020-2773 and CVE-2020-2654 have been identified in Jazz Team Server shipped with Jazz Reporting Service

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilitiesin IBM® SDK Java Technology Edition from Oct 2020 and January 2021 CPU plus CVE-2020-14781, CVE-2020-14782, CVE-2020-2773 and CVE-2020-2654 that are affecting Jazz...

Security Bulletin: A Security Vulnerabilities in IBM Java Runtime affect IBM License Key Server Administration and Reporting Tool and its Agent

Summary A security vulnerabilities have been found in the IBM® Runtime Environment Java™ used by IBM License Key Server Administration and Reporting Tool and its Agent. A fix has been published to mitigate the same. Vulnerability Details Refer to the security bulletins listed in the...

Ocean Data Systems Dream Report 5 R20-2 安全漏洞

Ocean Data Systems Dream Report 5 R20-2 is an application from the French company Ocean Data Systems. A real-time reporting and charting solution. Dream Report 5 R20-2 has a security vulnerability that allows an attacker to replace the Syncfusion Dashboard Service service binary to escalate...

Tuf - A Framework For Securing Software Update Systems

This repository is the reference implementation of The Update Framework TUF. It is written in Python and intended to conform to version 1.0 of the TUF specification. This implementation is in use in production systems, but is also intended to be a readable guide and demonstration for those workin...

Citrix Hypervisor Security Update

Description of Problem Two security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. These issues affect all currently supported versions of Citrix Hypervisor up to and...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman that arises from improper authorization handling...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. Foreman has a security vulnerability that can be exploited by an attacker to emulate foreman-proxy...

File upload vulnerability in health collection reporting system (CNVD-2021-24510)

Health collection and reporting system using PHP + mysql development, open source code, to facilitate secondary development. Health Collection and Reporting System has a file upload vulnerability that can be exploited by attackers to gain control of the server...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

/user/sessions endpoint allows detecting valid accounts

This Security Advisory is about a vulnerability in eZ Platform v1.13, v2.5, and v3.2, and in Ibexa DXP and Ibexa Open Source v3.3. The /user/sessions endpoint can let an attacker detect if a given username or email refers to a valid account. This can be detected through differences in the respons...

GHSA-7VWG-39H8-8QP8 /user/sessions endpoint allows detecting valid accounts

This Security Advisory is about a vulnerability in eZ Platform v1.13, v2.5, and v3.2, and in Ibexa DXP and Ibexa Open Source v3.3. The /user/sessions endpoint can let an attacker detect if a given username or email refers to a valid account. This can be detected through differences in the respons...

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability...

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability...

Privilege escalation

Windows Error Reporting Elevation of Privilege Vulnerability...

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability...

CVE-2021-24090

CVE-2021-24090 is a Windows Elevation of Privilege affecting Windows Error Reporting (WER). The connected records identify the affected component as Windows Error Reporting and classify the vulnerability as privilege escalation with impact on confidentiality, integrity, and availability (per CVSS...

CVE-2021-24090 Windows Error Reporting Elevation of Privilege Vulnerability

...

CVE-2021-26411

creationtimestamp| type| source ---|---|--- 2021-03-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=560 2021-03-10 15:20:45+00:00| exploited| https://t.me/truesecator/1504 2021-03-11 19:00:31+00:00| seen| https://t.me/cibsecurity/24780 2021-03-15 04:50:46+00:00|...