938 matches found
Microsoft Windows - 'EternalRomance'/'EternalSynergy'/'EternalChampion' SMB Remote Code Execution (Metasploit) (MS17-010)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Windows XP systems that are not part of a domain default to treating all network logons as if they were Guest. This prevents SMB relay attacks from gaining administrativ...
CVE-2017-18080
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery CSRF vulnerability...
Cross site request forgery (csrf)
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery CSRF vulnerability...
PT-2018-6659
Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions prior to 6.3.1 Description: The issue allows remote attackers to modify security settings via a Cross-site request forgery CSRF vulnerability, specifically through the saveConfigureSecurity resource. Recommendations:...
CVE-2017-18080: Cross-Site Request Forgery (CSRF)
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery CSRF vulnerability...
App Layering: How to specify or disable SSL protocols and ciphers in the ELM
Modern security requirements often specify disabling certain SSL protocols or cipher families. The ELM uses an Apache web server daemon for accessing the Management Console UI. Citrix keeps the ELM deployment images up to date with modern requirements requiring TLS 1.2, disabling SSLv3, disabling...
CVE-2017-1000503
A race condition during Jenkins 2.81 through 2.94 inclusive; 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related...
Jenkins Random Startup Failure Vulnerability - Windows
A race condition during Jenkins startup could result in the wrong order of execution of commands during initialization. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Jenkins Random Startup Failure Vulnerability - Linux
A race condition during Jenkins startup could result in the wrong order of execution of commands during initialization. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2017-1000503
A race condition during Jenkins 2.81 through 2.94 inclusive; 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related...
CVE-2017-1000503: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition during Jenkins 2.81 through 2.94 inclusive; 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related...
CVE-2017-14387
The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...
CVE-2017-12363
CVE-2017-12363 affects Cisco WebEx Meeting Server. The vulnerability allows an unauthenticated, remote attacker to modify the welcome message of a meeting due to insufficient security settings on meetings. Connected documents confirm the impact is via modification of meeting welcome messages and ...
CVE-2017-12363: Exposure of Resource to Wrong Sphere
A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...
Cisco WebEx Meeting Server Unauthorized Welcome Message Modification Vulnerability
A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...
Tor: Enforce minimum master password complexity
Hi Team, Actual results: There is no password complexity set for Master password in about:preferencessecurity , Because I was able to set my password like 123,123456,www, admin etc which is really common, apart from that we can use spaces as well in master password i was able to set space as my...
How to configure Applock device Policy on IOS
How to configure Applock device Policy on IOS...
Read all Windows Policy Security Settings - Windows
Read all Windows Advanced Policy Security Settings Windows. Note: This script saves into DB only and does not report any output. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Maple Maplet File Creation and Command Execution
A command execution vulnerability exists in Maplesoft Maple. The vulnerability is due to insufficient security settings in the application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code in the context of the application...
KLA10964 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10960. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...