CVE-2015-4075: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task...

EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2017-1224)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VN...

Oilrig / Cleaver Malicious Scheduled Task Detection

This script tries to detect several indicators for malicious tools used by Iranian APT group SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Arbitrary File Deletion Vulnerability in MetInfo Version 5.3.18 Backend

MetInfo is a Content Management System CMS developed using PHP and Mysql. An arbitrary file deletion vulnerability exists in a function in MetInfo version 5.3.18 physical.php. An attacker can exploit this vulnerability to delete task files...

1x Android Buffer Overflow

Vulnerability of task management in the 1x Android operating system from the CAF repository. Exploiting this vulnerability can allow a malicious actor to trigger buffer overflows during task processing...

1x Android Task Management Privilege Escalation

The vulnerability in the task management of the 1x Android operating system arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise privacy, integrity, and accessibility...

[SECURITY] Fedora 25 Update: php-horde-nag-4.2.15-1.fc25

Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists i.e., todo lists. It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight...

[SECURITY] Fedora 26 Update: php-horde-nag-4.2.15-1.fc26

Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists i.e., todo lists. It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight...

[SECURITY] Fedora 26 Update: rt-4.4.1-9.fc26

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

Qemu: i386: leakage of stack memory to guest in kvmvapic.c

An information-exposure flaw was found in Quick Emulator QEMU in Task Priority Register TPR optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory...

Qemu: i386: leakage of stack memory to guest in kvmvapic.c

An information-exposure flaw was found in Quick Emulator QEMU in Task Priority Register TPR optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory...

UPDATE: OWASP Dependency-Check 2.1.0!

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 2.1.0! What I like about this release...

Multiple Vulnerabilities in WordPress Task Manager Pro

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Task Manager Pro is a WordPress task management plugin. Task Manager Pro is a WordPress task management plugin...

Hardcoded credentials

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222

CVE-2017-3222 relates to AmosConnect 8, where hard-coded credentials allow remote attackers to gain full administrative privileges and execute commands with SYSTEM privileges on the Windows host via AmosConnect Task Manager. The surrounding docs note an accompanying backdoor account and that Amos...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222: Use of Hard-coded Credentials

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

PT-2017-2834

Name of the Vulnerable Software and Affected Versions AmosConnect version 8 Description The issue is related to hard-coded credentials in the AmosConnect Task Manager, allowing remote attackers to gain full administrative privileges. This includes the ability to execute commands on the Microsoft...

WordPress Task Manager Pro <= 1.3.1 - Authenticated SQL Injection

Blind SQL Injection on task-details page task parameter. PoC Logged as a follower: https://localhost/wp/wp-admin/admin.php?page=task-details=6+and+sleep1+and+1%3D1...