Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This is a PoC exploit for CVE-2022-26134, a vulnerability in Con...

[SECURITY] Fedora 36 Update: webanalyze-0.3.1-6.fc36

Port of Wappalyzer uncovers technologies used on websites in Go to automate scanning...

secureCodeBox (SCB) - Continuous Secure Delivery Out Of The Box

secureCodeBox is a kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box. For additional documentation aspects please have a look at our documentation website:...

Naabu - A Fast Port Scanner Written In Go With A Focus On Reliability And Simplicity

Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT scans on the host/list of hosts and lists all ports that return a reply. Features Fast And Simple SYN/CONNECT probe...

Security update for trivy (moderate)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2022:10022-1 Rating: moderate References: 1199760 Cross-References: CVE-2022-23648 CVE-2022-28946 CVSS scores: CVE-2022-23648 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-23648 SUSE: 5.5...

Malicious code in azure-purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1367 Malicious code in azure-purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a300b153dbc45cf8312f002d77013939515cb65a2f403173ece9338d55d5585a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5532 Malicious code in purview-scanning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a300b153dbc45cf8312f002d77013939515cb65a2f403173ece9338d55d5585a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning

For years, the two most popular methods for internal scanning: agent-based and network-based were considered to be about equal in value, each bringing its own strengths to bear. However, with remote working now the norm in most if not all workplaces, it feels a lot more like agent-based scanning ...

gogo

gogo blog posts. - https://chainreactors.github.io/wiki/blog...

The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software management devices is related to incorrect restrictions on XML references to external objects. This allows attackers to view the content of any file on the server or perform network scanning on the internal and external infrastructure.

The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software related to external objects’ XML links is due to incorrect restrictions on these links. Exploiting this vulnerability allows a malicious actor to view the...

AutoPWN Suite - Project For Scanning Vulnerabilities And Exploiting Systems Automatically

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. How does it work? AutoPWN Suite uses nmap TCP-SYN scan to enumerate the host and detect the version of softwares running on it. After gathering enough information about the host, AutoPWN Suite...

CRLFsuite - Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection. Installation $ git clone https://github.com/Nefcore/CRLFsuite.git $ cd CRLFsuite $ sudo python3 setup.py install $ crlfsuite -h Features Single URL scanning Multiple URL scanning Stdin supported GET & POST method supported...

Command injection

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file...

Moderate: Red Hat Security Advisory: ACS 3.70 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes bug fixes and feature improvements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score...

BinAbsInspector - Vulnerability Scanner For Binaries

BinAbsInspector Binary Abstract Inspector is a static analyzer for automated reverse engineering and scanning vulnerabilities in binaries, which is a long-term research project incubated at Keenlab. It is based on abstract interpretation with the support from Ghidra. It works on Ghidra's Pcode...

F-secure Atlant Denial of Service Vulnerability

F-secure Atlant is a platform from the Finnish company F-secure for building applications that can scan and detect malicious files. a denial-of-service vulnerability exists in F-Secure Atlant, which can be exploited by attackers to crash the scanning engine by scanning the aemobile component...

Linglong 安全漏洞

Linglong is an A-asset cruise scanning system by drunkkk's personal developer. It is used to discover assets, perform port blasting, and help organizations find weak password problems faster. Linglong v1.0 version has a security vulnerability that stems from an access control issue. An attacker...

CVE-2022-28875

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...