4596 matches found
Fedora: Security Advisory for golang-github-quay-claircore (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: webanalyze-0.3.1-6.fc35
Port of Wappalyzer uncovers technologies used on websites in Go to automate scanning...
[SECURITY] Fedora 35 Update: golang-github-quay-claircore-0.5.4-5.fc35
Foundation modules for scanning container packages and reporting vulnerabilities...
CVE-2022-28876
A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker...
CVE-2022-28876
CVE-2022-28876 affects F-Secure Atlant and certain WithSecure products. The aeheur.dll component used by the scanner can crash the scanning engine, enabling a remote attacker to trigger a DoS. Impact is availability loss (per documents). Exploitation details are limited to remote trigger; no reme...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2022-26134, a vulnerability in Con...
[SECURITY] Fedora 36 Update: webanalyze-0.3.1-6.fc36
Port of Wappalyzer uncovers technologies used on websites in Go to automate scanning...
secureCodeBox (SCB) - Continuous Secure Delivery Out Of The Box
secureCodeBox is a kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box. For additional documentation aspects please have a look at our documentation website:...
Naabu - A Fast Port Scanner Written In Go With A Focus On Reliability And Simplicity
Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT scans on the host/list of hosts and lists all ports that return a reply. Features Fast And Simple SYN/CONNECT probe...
Security update for trivy (moderate)
openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2022:10022-1 Rating: moderate References: 1199760 Cross-References: CVE-2022-23648 CVE-2022-28946 CVSS scores: CVE-2022-23648 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-23648 SUSE: 5.5...
Malicious code in azure-purview-scanning (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1367 Malicious code in azure-purview-scanning (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af96a71e042ed4c11e40a6554339f77f7cdedb3285d5f92f468a995c75073e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in purview-scanning (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a300b153dbc45cf8312f002d77013939515cb65a2f403173ece9338d55d5585a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5532 Malicious code in purview-scanning (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a300b153dbc45cf8312f002d77013939515cb65a2f403173ece9338d55d5585a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning
For years, the two most popular methods for internal scanning: agent-based and network-based were considered to be about equal in value, each bringing its own strengths to bear. However, with remote working now the norm in most if not all workplaces, it feels a lot more like agent-based scanning ...
gogo
gogo blog posts. - https://chainreactors.github.io/wiki/blog...
The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software management devices is related to incorrect restrictions on XML references to external objects. This allows attackers to view the content of any file on the server or perform network scanning on the internal and external infrastructure.
The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software related to external objects’ XML links is due to incorrect restrictions on these links. Exploiting this vulnerability allows a malicious actor to view the...
AutoPWN Suite - Project For Scanning Vulnerabilities And Exploiting Systems Automatically
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. How does it work? AutoPWN Suite uses nmap TCP-SYN scan to enumerate the host and detect the version of softwares running on it. After gathering enough information about the host, AutoPWN Suite...
CRLFsuite - Fast CRLF Injection Scanning Tool
CRLFsuite is a fast tool specially designed to scan CRLF injection. Installation $ git clone https://github.com/Nefcore/CRLFsuite.git $ cd CRLFsuite $ sudo python3 setup.py install $ crlfsuite -h Features Single URL scanning Multiple URL scanning Stdin supported GET & POST method supported...
