Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware

Indicator of Compromise Scanner for CVE-2019-19781 This repos...

Trend Micro Password Manager vulnerable to information disclosure

Overview Password Manager provided by Trend Micro Incorporated contains an information disclosure vulnerability CWE-200. Under certain conditions, the information ID, password etc. managed by Password Manager are kept on the memory in plaintext. They may be retrieved when the memory scan is done...

JVN#49593434: Trend Micro Password Manager vulnerable to information disclosure

Password Manager provided by Trend Micro Incorporated contains an information disclosure vulnerability CWE-200. Under certain conditions, the information ID, password etc. managed by Password Manager are kept on the memory in plaintext. They may be retrieved when the memory scan is done. Impact A...

CVE-2019-15961

A vulnerability in the email parsing module Clam AntiVirus ClamAV Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in...

laravelN00b - Automated Scan .env Files And Checking Debug Mode In Victim Host

Incorrect configuration allows you to access .env files or reading env variables. LaravelN00b automated scan .env files and checking debug mode in victim host. Scan rationale Scan host. Resolve IP adress and check .env file in IP Adress Checking debug mode Laravel Read .env variables Installation...

DEBIAN-CVE-2019-20334

In Netwide Assembler NASM 2.14.02, stack consumption occurs in expr functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 and stdscan in asm/stdscan.c. This is similar to CVE-2019-6290 and CVE-2019-6291...

UBUNTU-CVE-2019-20334

In Netwide Assembler NASM 2.14.02, stack consumption occurs in expr functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 and stdscan in asm/stdscan.c. This is similar to CVE-2019-6290 and CVE-2019-6291...

Archery Cross-Site Scripting Vulnerability

Archery is an open source vulnerability assessment and management tool that helps developers and penetration testers perform scans and manage vulnerabilities. A stored cross-site scripting vulnerability exists in the Vulnerability Scan Scheduling page in Archery versions prior to 1.3. An attacker...

SQL Injection Vulnerability in Hongyu Multi-User Mall System scan_list.php Page

Hongyu multi-user mall system is a B2B2C new retail e-commerce system. A SQL injection vulnerability exists in the scli.php page of Hongyu Multi-User Mall System, which can be exploited by attackers to obtain sensitive information...

Cross site scripting

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

PYSEC-2019-42

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

PYSEC-2019-112

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

CVE-2019-20008

Archery before 1.3 has a stored XSS in the vulnerability-scan scheduling page when a payload is inserted into a project name (creating or editing). Affected software: Archery; vulnerable component: project name handling on the scheduling page. Root cause: stored XSS vulnerability (details not pro...

nmapAutomator - Tool To Automate All Of The Process Of Recon/Enumeration

nmapAutomator A script that you can run in the background! Summary The main goal for this script is to automate all of the process of recon/enumeration that is run every time, and instead focus our attention on real pen testing. This will ensure two things: 1 Automate nmap scans. 2 Always have so...

CVE-2019-20000

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted...

CVE-2019-20000

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted...

CVE-2019-20000

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted...

CVE-2019-20000

CVE-2019-20000 affects BullGuard Premium Protection 20.0.371.8. The vulnerability is a TOCTOU issue in the malware scan function that allows a symbolic-link attack, enabling privileged files to be deleted. Connected sources confirm the issue across Red Hat and CVE records, with no explicit exploi...

Stripo Inc: SSRF leads to internal port scan

SSRF Vulnerbility leads to internal port scan. From the response time, we can confirm the internal IP exist/accessible or not...

The vulnerability of the adis_update_scan_mode() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the adisupdatescanmode function drivers/iio/imu/adisbuffer.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...