Directory traversal

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal arbitrary file access vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files...

CVE-2018-20468

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution...

CVE-2018-20468

CVE-2018-20468 affects Tyto Sahi Pro (versions up to 7.x.x and 8.0.0) where the web reports module’s export-to-Excel feature is vulnerable to CSV injection. An attacker can embed Excel formulas in an automation script, and after export, this can lead to code execution. The available documentation...

CVE-2018-20469

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard h2 system functions...

CVE-2018-20470

Tyto Sahi Pro through 8.0.0 is affected by a Local File Inclusion / directory traversal vulnerability in the web reports module, enabling an attacker to view sensitive server files. Affected: Tyto Sahi Pro versions through 7.x.x and 8.0.0 (per CVE-2018-20470). Root cause: improper handling of fil...

Prithvi - Report Generation Tool

Prithvi is a report generation tool specially made for Security Assessment which is free to use and easy to use. It will generate high quality vulnerability assessment report for security controls. It got various features and majorly made for security assessment. You can easily find security...

PT-2019-10075 · Tyto · Tyto Sahi Pro

Name of the Vulnerable Software and Affected Versions: Tyto Sahi Pro versions prior to 8.0.1 Description: A directory traversal issue exists in the web reports module, allowing an outside attacker to access sensitive files. Recommendations: For versions prior to 8.0.1, update to version 8.0.1 or...

PT-2019-10073 · Tyto · Tyto Sahi Pro

Name of the Vulnerable Software and Affected Versions: Tyto Sahi Pro versions prior to 8.0.1 Description: An issue was discovered in the web reports module of the software, where a parameter is vulnerable to h2 SQL injection. This allows attackers to inject SQL queries and run standard h2 system...

PhoneInfoga - Advanced Information Gathering & OSINT Tool For Phone Numbers

PhoneInfoga is one of the most advanced tools to scan phone numbers using only free resources. The goal is to first gather standard information such as country, area, carrier and line type on any international phone numbers with very good accuracy. Then search for footprints on search engines to...

Cross-Site-Scripting (XSS) vulnerabilty in Fortiweb reports

The URL part of the report message is not encoded in Fortinet FortiWeb which may allow an attacker to execute unauthorized code or commands Cross Site Scripting via attack reports generated in HTML format...

Security Bulletin: Vulnerability Advisor for IBM Cloud Container Registry might fail to detect some package vulnerabilities in Red Hat images

Summary Vulnerability Advisor for IBM Cloud Container Registry might have failed to detect some package vulnerabilities in Red Hat image reports produced before 2019-05-17. Vulnerability Details Vulnerability Advisor for IBM Cloud Container Registry did not detect all known package vulnerabilitie...

CVE-2018-20434

creationtimestamp| type| source ---|---|--- 2019-06-04 17:58:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/librenmsaddhostcmdinject.rb 2019-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46970 2019-06-28 00:00:00+00:00...

Microsoft Launches a New Recognition Program for MAPP Partners

There are many dedicated people and organizations who contribute to the protection and security of our common customers. For years, Microsoft has recognized security researchers for helping protect the ecosystem. Now, we’re announcing the launch of a new program to better recognize and thank...

Qualys Cloud Platform (VM, PC) 8.19.1 New Features

This new release of the Qualys Cloud Platform VM, PC, version 8.19.1, includes newly added technology support for HP Safeguard and CISCO ACS 5, collected via Qualys Out-of-Band Configuration Assessment. Feature Highlights Qualys Policy Compliance PC New Technology Support - Qualys now supports th...

CVE-2019-1069

creationtimestamp| type| source ---|---|--- 2019-05-23 08:09:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/nollapaivahaavoittuvuuksia-windows-10-kayttojarjestelmassa 2020-10-09 13:20:00+00:00| seen| MISP/fbff27c0-f30f-445c-92af-76781df1856d 2020-10-26 14:14:23+00:00| seen|...

CVE-2019-8442

creationtimestamp| type| source ---|---|--- 2019-05-22 18:48:20+00:00| seen| https://t.me/cvemitreorg/141 2020-02-11 00:19:09+00:00| seen| https://t.me/thebugbountyhunter/3810 2020-10-02 06:57:39+00:00| published-proof-of-concept| https://t.me/cKure/2426 2024-03-18 07:23:33+00:00|...

HCL Exposes Customer, Personnel Info in Wide-Ranging Data Leak

IT services provider HCL Technologies has inadvertently exposed passwords, sensitive project reports and other private data of thousands of customers and internal employees on various public HCL subdomains. HCL, an $8 billion conglomerate with more than 100,000 employees, specializes in...

May 14, 2019—KB4499149 (Monthly Rollup)

None None...

May 14, 2019—KB4499164 (Monthly Rollup)

None None...

Horn3t - Powerful Visual Subdomain Enumeration At The Click Of A Mouse

Horn3t is your Nr 1 tool for exploring subdomains visually. Building on the great Sublist3r framework or extensible with your favorite one it searches for subdomains and generates awesome picture previews. Get a fast overview of your target with http status codes, add custom found subdomains and...