CVE-2019-8385

Thomson Reuters Desktop Extensions 1.9.0.358 contains an unauthenticated directory traversal and local file inclusion vulnerability (CVE-2019-8385) in ThomsonReuters.Desktop.Service.exe and ThomsonReuters.Desktop.exe. An attacker can use a \.. path to port 6677 to enumerate sensitive files on the...

Microsoft Windows 10 1809 - 'CmKeyBodyRemapToVirtualForEnum' Arbitrary Key Enumeration Privilege Escalation

Windows: CmKeyBodyRemapToVirtualForEnum Arbitrary Key Enumeration EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The kernel’s Registry Virtualization doesn’t safely open the real key fo...

Debian DSA-4397-1 : ldb - security update

Garming Sam reported an out-of-bounds read in the ldbwildcardcompare function of ldb, a LDAP-like embedded database, resulting in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4397. The...

[SECURITY] [DSA 4397-1] ldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2019 https://www.debian.org/security/faq -...

Ophcrack - A Windows Password Cracker Based On Rainbow Tables

Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms. Features: Runs on Windows, Linux/Unix, Mac OS X, ... Cracks LM...

Debian: Security Advisory (DSA-4397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OS Command Injection Vulnerability in Reporter CLI

SUMMARY The Symantec Reporter CLI is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges. AFFECTED PRODUCTS Reporter --- CVE | Supported Versions | Remediation...

Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance

Summary IBM Security Access Manager Appliance has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-15906 DESCRIPTION: OpenSSH is vulnerable to a denial of service, caused by an error in the processopen function when in read-only mode. A remote authenticated attacker...

WordPress <= 5.0 - PHP Object Injection via Meta Data vulnerability

PHP Object Injection via Meta Data vulnerability found by Sam Thomas in WordPress versions = 5.0. Solution Update WordPress to the latest available version at least 5.0.1...

A Post-Exploitation Scanning/Mapping Tool: Scavenger

SCAVENGER is a multi-threaded post-exploitation scanning tool for mapping systems and finding “interesting” and most frequently used files, folders and services. Once credentials are gained, it can scan remote systems Linux, Windows and OSX via services like SMB and SSH to scrape that system...

SolarWinds Server & Application Monitor (SAM) Detection (Windows SMB Login)

SMB login-based detection of SolarWinds Server & Application Monitor SAM. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

U.S Charges Two Iranian Hackers for SamSam Ransomware Attacks

The Department of Justice announced Wednesday charges against two Iranian nationals for their involvement in creating and deploying the notorious SamSam ransomware. The alleged hackers, Faramarz Shahi Savandi, 34, and Mohammad Mehdi Shah, 27, have been charged on several counts of computer hackin...

DEBIAN-CVE-2018-13845

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

sam-illustraties.nl Open Redirect vulnerability

Open Bug Bounty ID: OBB-641976 Description| Value ---|--- Affected Website:| sam-illustraties.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Microsoft Windows: Network security: Do not store LAN Manager hash value on next password change

This policy setting determines whether LAN Manager is prevented from storing hash values for the new password the next time the password is changed. Hash values are a representation of the password after the encryption algorithm is applied that corresponds to the format that is specified by the...

Microsoft Windows: Network access: Restrict clients allowed to make remote calls to SAM

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaclientsallowedremotesam.nasl 11098 2018-08-23 14:32:47Z emoss $ Check value for Network access: Restrict clients allowed to make remote calls to SAM Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Microsoft Windows: Network access: Do not allow anonymous enumeration of SAM accounts and shares

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaanonymoussamshares.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Network access: Do not allow anonymous enumeration of SAM accounts and shares Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

sam2p heap buffer overflow vulnerability (CNVD-2018-15513)

sam2p is a command-line utility that converts many raster bitmap image formats such as GIF, JPG/JPEG, and PNG to PostScript or PDF files. giflib is a set of portable tools and library routines for working with GIF images. A heap buffer overflow vulnerability exists in the dgiflib.c file in GIFLIB...

Simple IOC and Incident Response Scanner: Loki

LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...

Red Hat katello-headpin SAM web application cross-site scripting vulnerability

Red Hat katello-headpin is a systems management engine from Red Hat that provides configuration management, subscription management, and content management workflows.SAM web application is one of the SAM management applications. A cross-site scripting vulnerability exists in the SAM web applicati...