CVE-2017-12196

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the...

CVE-2018-1308

This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion XXE in the &dataConfig= parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the...

Machine Learning Penetration Testing: GyoiThon

GyoiThon is a growing penetration test tool using Deep Learning. Deep Learning improves classification accuracy in proportion to the amount of learning data. Therefore, GyoiThon will be taking in new learning data during every scan. Since GyoiThon uses various features of software included in HTT...

Cross-site Request Forgery (CSRF)

ajenti is vulnerable to cross-site request forgery CSRF attacks. Using this vulnerability, attackers can perform remote code execution RCE attacks and any other action that a user of that level may be able to do on a server...

Remote code execution

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

PT-2019-2859

Name of the Vulnerable Software and Affected Versions Exim versions 4.87 through 4.91 Description The issue is related to improper validation of recipient addresses in the deliver message function, located in /src/deliver.c, which may lead to remote command execution. This flaw can be exploited b...

Path Traversal

stattic is vulnerable to path traversal attacks. Using a string including ../, attackers can traverse the server and any file with a known path...

Vulnerability of the Server:Security:Privileges component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the Server:Security:Privileges component of the MySQL database management system is related to security configuration errors. Exploiting this vulnerability may allow a malicious actor to cause service interruptions by modifying system data remotely...

File Exposure

oozie-core is vulnerable to file exposure. Using a XML directives within a XML workflow file, attackers can expose private/sensitive files within the Oozie server...

X (Formerly Twitter): CVE-2017-15277 on Profile page

Hi security team, Summary: Please refer to 302885 for more details. Uploading a .gif produces significantly different images every time which means the server is leaking information. Steps To Reproduce: 1. Clone https://github.com/neex/gifoeb 2. Generate exploitable gif with ./gifoeb gen 5120x512...

Cloud & Big Data: The Future of Security – Carbon Black & VMware’s 15-City Tour “Cloud Force Security” Kicks Off Feb. 20!

Endpoint Security is Broken Attackers are innovating faster than traditional defenses can keep up. In response, the security stack has become too complicated as more products that don’t work together are introduced to fill the gaps. There is a better way. Organizations are moving their endpoint a...

Website Security Dog suffers from SQL Injection Vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Website Security Dog suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

[ASA-201802-5] sthttpd: arbitrary code execution

Arch Linux Security Advisory ASA-201802-5 ========================================= Severity: High Date : 2018-02-09 CVE-ID : CVE-2017-10671 Package : sthttpd Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-333 Summary ======= The package sthttpd before...

Security Glue Between the Silos of Endpoint, Server, Cloud and Network Security Gets More Critical

Endpoint and Host security techniques have diverged. There used to be considerable similarity between the techniques and tools used to secure desktops, servers, and even networks. Desktops evolved to become Endpoints, as mobile devices proliferated and they were assembled into a collective of bei...

Web Shell Detector - PHP Script That Helps You Find And Identify PHP / CGI (Perl) / ASP / ASPX Shells

Web Shell Detector is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has a light weight and...

Command injection

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php lowercase is blocked but .PHP uppercase is not...

RubyGems: Cross-Domain JavaScript Source File Inclusion

The page includes one or more script files from a third-party domain. XSSI is a fancy way of saying: you are including in your program, someone elses code; You don't have any control over what is in that code, and you don't have any control over the security of the server on which it is hosted...

CVE-2018-2591

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected are 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2018-2703: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

Slack: Information leakage and default open port

@freem0 found Prometheus plugin output that was exposed at one of our servers. The information exposed including some OS information metrics about memory usage, but no customer data was at risk and no exploit was possible. Thank you @freem0!...