104 matches found
Content Security Policy Permissive Sources
Content Security Policy CSP is a web security standard that helps prevent attacks like XSS, clickjacking and mixed content by restricting which resources browsers can load. Several high-risk sources have been detected in the CSP that could allow bypassing these protections through permissive...
Ivanti Desktop & Server Management (DSM) Installed (Windows)
Binary data ivantidesktopservermanagementwininstalled.nbin...
BeyondTrust Privileged Remote Access Detection
Binary data beyondtrustprivilegedremoteaccessdetect.nbin...
Beyondtrust Remote Support Detection
Binary data beyondtrustremotesupportdetect.nbin...
JetBrains WebStorm Installed (Linux)
Binary data jetbrainswebstormnixinstalled.nbin...
Fedora 41 : python-jinja2 (2024-b595c68c09)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b595c68c09 advisory. Automatic update for python-jinja2-3.1.4-1.fc41. Changelog Tue May 7 2024 Lumr Balhar - 3.1.4-1 - Update to 3.1.4 rhbz2279211,rhbz2279491 Tenable has extract...
Introducing New Pricing For Wordfence CLI!
We have an exciting announcement today about the Wordfence CLI project. We launched Wordfence CLI at WordCamp US back in August of 2023 with the goal of bringing malware and vulnerability scanning to the command line. Weve been working closely with our customers since the launch to better...
CVE-2024-25129 Limited data exfiltration in CodeQL CLI
The CodeQL CLI repo holds binaries for the CodeQL command line interface CLI. Prior to version 2.16.3, an XML parser used by the CodeQL CLI to read various auxiliary files is vulnerable to an XML External Entity attack. If a vulnerable version of the CLI is used to process either a maliciously...
CVE-2024-25129 Limited data exfiltration in CodeQL CLI
The CodeQL CLI repo holds binaries for the CodeQL command line interface CLI. Prior to version 2.16.3, an XML parser used by the CodeQL CLI to read various auxiliary files is vulnerable to an XML External Entity attack. If a vulnerable version of the CLI is used to process either a maliciously...
Application Security Posture Management
Accelerating the Remediation of Vulnerabilities From Code To Cloud Written by Eric Sheridan, Chief Innovation Officer, Tromzo In this guest blog post by Eric Sheridan, Chief Innovation Officer at valued Rapid7 partner Tromzo, you’ll learn how Rapid7 customers can utilize ASPM solutions to...
"Internal Server Error 43549" response from Gateway with malformed request "/epatype?Param"
Security scanning report vulnerability on ADC: Web Server Misconfiguration - Server Error Message when http request url includes "/epatype?"...
How Malicious Android Apps Slip Into Disguise
Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into mobile apps and evade security scanning tools. Google says it has updated its app malware detection mechanisms in response to the new research. At issue is a...
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab EE that stems from allowing an...
How to use the CLI to disable HTTP OPTIONS Method for virtual server
Some security scanning reports suggest to disable the OPTIONS HTTP Method on web server. The article provides the use of a rewrite policy to avoid processing the OPTIONS HTTP Method...
K14334: BIG-IP Analytics generates predictable session cookies CVE-2013-7408
Security Advisory Description F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value. CVE-2013-7408 This may become apparent when running vulnerability scans such as Qualys against a...
Ostorlab - A Security Scanning Platform That Enables Running Complex Security Scanning Tasks Involving Multiple Tools In An Easy, Scalable And Distributed Way
The Sales Pitch If this is the first time you are visiting the Ostorlab Github page, here is the sales pitch. Security testing requires often chaining tools together, taking the output from one, mangling it, filtering it and then pushing it to another tool. Several tools have tried to make the...
WatchGuard Firebox Appliance / Fireware Detection Consolidation
Consolidation of WatchGuard Firebox appliance and the underlying Fireware OS detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228Apache Log4j Remote Code Execution） all log...
Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows
Cybersecurity researchers have disclosed a novel technique adopted by a threat actor to deliberately evade detection with the help of malformed digital signatures of its malware payloads. "Attackers created malformed code signatures that are treated as valid by Windows but are not able to be...
