gilacountyaz.gov Cross Site Scripting vulnerability OBB-2825277

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| gilacountyaz.gov ---|--- Open Bug Bount...

Splunk Installed (Windows)

Binary data splunkwininstalled.nbin...

Splunk Universal Forwarder Installed (Windows)

Binary data splunkuniversalforwarderwininstalled.nbin...

westerncape.gov.za Cross Site Scripting vulnerability OBB-2818124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| westerncape.gov.za ---|--- Open Bug...

Splunk Installed (Linux)

Binary data splunknixinstalled.nbin...

Splunk Universal Forwarder Installed (Linux)

Binary data splunkuniversalforwardernixinstalled.nbin...

Integrating JIRA to the Qualys Cloud Platform

This is the second in a blog series on integrations to the Qualys Cloud Platform. This post looks at what are the requirements to build a successful integration and workarounds when some of the pieces are missing functionality. We then specifically consider the question of integrated Qualys with...

Splunk Enterprise 8.1.x < 8.1.5, 8.2.x < 8.2.1 Authentication Bypass

A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders. Note that...

All Vulnerabilities for cgb.edu.co Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| cgb.edu.co ---|--- Open Bug Bounty...

gis.south-ayrshire.gov.uk Cross Site Scripting vulnerability OBB-2759371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| gis.south-ayrshire.gov.uk ---|--- Open...

All Vulnerabilities for pregase.santacruz.gov.ar Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pregase.santacruz.gov.ar ---|--- Open B...

al-ns1.ap.gov.br Cross Site Scripting vulnerability OBB-2740091

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| al-ns1.ap.gov.br ---|--- Open Bug Bount...

uczelnie.edu.pl Open Redirect vulnerability OBB-2733948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| uczelnie.edu.pl ---|--- Open Bug Bounty...

The vulnerability of Splunk Enterprise’s deployment servers for operational analysis allows attackers to enhance their privileges.

The vulnerability of the Splunk Enterprise platform’s deployment servers is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of Splunk Enterprise’s deployment servers allows a attacker to compromise the Universal Forwarder and execute arbitrary code.

The vulnerability of the Splunk Enterprise platform’s deployment servers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise the Universal Forwarder and execute arbitrary code...

Sealighter - Easy ETW Tracing for Security Research

I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without needing to know format Robust Event filtering including...

Splunk Resource Permission Assignment Error Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. The software is primarily used to collect, index, and analyze the data it generates, including data generated by all IT systems and infrastructure physical, virtual machines, and cloud.A resource privilege assignment err...

Splunk Command Injection Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. The software is primarily used to collect, index, and analyze the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A command injection vulnerability...

Splunk Enterprise for Windows 8.1.x < 8.1.1 Local Privilege Escalation

According to its self-reported version number, the version of Splunk running on the remote web server is Splunk Enterprise 8.1.x prior to 8.1.0. It is, therefore, affected by a misconfiguration in the node default path that allows for local privilege escalation from a lower privileged user to the...

Malicious code in nfe-splunk-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 333a63739ef36792f895d9c219edb642118e91dfc92c60b14a00365e79fd45f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...