Spoof SSDP replies to phish for NTLM hashes: evil-ssdp

This tool responds to SSDP multicast discover requests, posing as a generic UPNP device on a local network. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable webpage. By default, this...

Joomla jsn gruve directory traversal vulnerability

JoomlaShine is the company that provides free joomla templates. A directory traversal vulnerability exists in joomla jsn gruve pro versions prior to 2.1.0, which can be exploited by attackers to obtain sensitive information...

Microsoft Windows: IE security prompt for Windows Installer scripts

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winieinstallerscripts.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Prevent Internet Explorer security prompt for Windows Installer scripts Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Event Log behavior when log file reaches its max size (App)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winappretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Event Log behavior when log file reaches its max size (Setup)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsetupretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Setup: Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-11589

Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the...

Microsoft Windows: Turn off the Order Prints picture task

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winorderprintpictask.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off the "Order Prints" picture task Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Turn off Internet Connection Wizard (if refers to Microsoft.com)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininetconnectionwizard.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Configure registry policy processing (background processing)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnogpolistchanges.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configure registry policy processing:Process even if the Group Policy objects have not changed Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows: Configure registry policy processing (background processing)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnobackgroundpolicy.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configure registry policy processing:Do not apply during periodic background processing Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

CVE-2018-12588

The CVE concerns a cross-site scripting (XSS) vulnerability in PKP Open Monograph Press (OMP) templates/frontend/pages/searchResults.tpl. Affected versions are PKP OMP 1.2.0 through 3.1.1-2 (before 3.1.1-3). The issue allows remote attackers to inject arbitrary script/HTML via the catalog.noTitle...

Cross-site Scripting (XSS)

knowledgerepo is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of parameters such as comments when rendering them through the templates...

Microsoft Windows: LAPS: Password Settings: Password Length

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswdlength.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Password Settings: Password Length Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

CVE-2018-12229

Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...

CVE-2018-12229

Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...

CVE-2018-12229

The CVE-2018-12229 issue affects PKP Open Journal System (OJS) versions 3.0.0 through 3.1.1-1. The root cause is a cross-site scripting flaw in the templates/frontend/pages/search.tpl, specifically via the By Author field, allowing remote attackers to inject arbitrary web script or HTML. Some sou...

CVE-2018-12229

Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...

Command Execution Vulnerabilities in Cicada Knowledge Enterprise Portal System V7.0.1 Backend Templates

Cicada Knowledge Enterprise Portal System is an open source and free enterprise portal system. Cicada Knowledge Enterprise Portal System V7.0.1 command execution vulnerability exists in the background template. An attacker can exploit the vulnerability to gain server privileges...

Code Execution Vulnerability in UQCMS B2B2C Multi-merchant E-commerce System Backend Templates

B2B2C multi-merchant e-commerce system is combined with years of e-commerce development experience to launch the B2B2C multi-store system. There is a code execution vulnerability in the backend template of UQCMS B2B2C Multi-merchant E-commerce System. Attackers can use this vulnerability to write...

RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)

Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs : OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-too...