Evilginx v2.0 - Standalone Man-In-The-Middle Attack Framework Used For Phishing Login Credentials Along With Session Cookies, Allowing For The Bypass Of 2-Factor Authentication

evilginx2 is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server to provide...

[SECURITY] Fedora 28 Update: thunderbird-60.2.1-2.fc28

Mozilla Thunderbird is a standalone mail and newsgroup client...

Phusion Passenger allows remote attackers to spoof headers

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...

Windows Update Cleanup (Tool) for Windows Embedded POSReady 7

Windows Update Cleanup Tool for Windows Embedded POSReady 7 Summary This update enables the Disk Cleanup wizard. After you install this update, you can use the Windows Update Cleanup option to delete Windows updates that you no longer need on Windows Embedded POSReady 7 devices. How to get this...

[SECURITY] Fedora 28 Update: thunderbird-60.0-1.fc28

Mozilla Thunderbird is a standalone mail and newsgroup client...

Destroyer Standalone Antivirus SysGuard.sys Driver Has a Local Lift Vulnerability

Destroyer Standalone Antivirus is an antivirus program. A local elevation of privilege vulnerability exists in the Destroyer Standalone Antivirus SysGuard.sys driver. An attacker can achieve elevation of privilege by constructing packets that cause the computer to blue screen...

[SECURITY] Fedora 27 Update: thunderbird-52.9.1-1.fc27

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2018-11770

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...

CVE-2018-11770

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...

Authentication flaw

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...

CVE-2018-11770

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...

Cisco Nexus 3000 and 9000 Series Switches NX-OS Denial of Service Vulnerability

The Cisco Nexus 3000 and 9000 Series Switches are different series of switch devices from Cisco. the NX-OS is a set of data center-grade operating system software used by the switches that run on it. A denial of service vulnerability exists in the implementation of the CLI commands and the...

Man-in-the-Middle (MitM)

scalajs-standalone-bin is vulnerable to man-in-the-middle MitM attacks. This is because it downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker i...

CVE-2016-10634

scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacke...

CVE-2016-10634

scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacke...

CVE-2016-10634

CVE-2016-10634 affects the scalajs-standalone-bin Binary wrapper for ScalaJS. The issue: the component downloads binary resources over HTTP, enabling MITM interception; an attacker on the network could swap the requested binary with a malicious one, potentially causing remote code execution on th...

selenium-standalone-painful remote code execution vulnerability

selenium-standalone-painful is a program for installing command line tools for starting a selenium standalone server. A security vulnerability exists in selenium-standalone-painful that originates when the program downloads an executable file over an unencrypted HTTP connection. A remote attacker...

Trend Micro Smart Protection Server Remote Denial of Service Vulnerability

Trend Micro Smart Protection Server Standalone is a server that provides smart protection from Trend Micro. A security vulnerability exists in version 3.x of Trend Micro Smart Protection Server Standalone. A remote attacker could exploit this vulnerability by sending a large number of specially...

Man-in-the-Middle (MitM)

selenium-standalone-painful is vulnerable to man-in-the-middle MitM attacks. This is because the application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...

CVE-2016-10679

selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by...