Photon OS 3.0: Linux PHSA-2021-3.0-0210

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0210. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148189;...

Photon OS 2.0: Nxtgn PHSA-2021-2.0-0331

An update of the nxtgn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0331. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148186...

Photon OS 3.0: Libtiff PHSA-2021-3.0-0210

An update of the libtiff package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0210. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148191;...

Photon OS 3.0: Nxtgn PHSA-2021-3.0-0210

An update of the nxtgn package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0210. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148192;...

Women in Security Part 5: Meet Lavine Oluoch, Threat Analyst

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack In continued celebration of Women’s History Month, we are excited to bring you our next featured security expert as a part of our six-part Women in Security series. Throughout March, we are...

Photon OS 4.0: Grub2 PHSA-2021-4.0-0001

An update of the grub2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148024;...

Photon OS 4.0: C PHSA-2021-4.0-0006

An update of the c package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0006. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148027; scriptversion"1.7";...

Women in Security Part 4: Meet Jan Lawford, Senior Director of EMEA Security Sales

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack As we continue to celebrate Women’s History Month, we are honored to share the stories of women in our VMware Security Business Unit, including members of our team and customers alike. By...

Photon OS 3.0: Apache PHSA-2021-3.0-0208

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0208. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147953;...

Photon OS 2.0: Envoy PHSA-2021-2.0-0326

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0326. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147949...

Photon OS 2.0: Glibc PHSA-2021-2.0-0329

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0329. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147951...

Weekly exploit digest – March, 15-21 – VMware View Planner, Win32k ConsoleControl, Microsoft Windows Containers DP API

Welcome to our weekly exploit digest! We should say this hasnt been a big week because guys keep producing exploits for the vulnerabilities discovered in the 1st half of March. Nevertheless, we have some new good arrivals for VMware, MS Windows and Win32 to talk about. New 4+ scored exploits have...

SUSE-SU-2021:0914-1 Security Beta update for Salt

This update fixes the following issues: salt: - virt.networkupdate: handle missing ipv4 netmask attribute - Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules bsc1177474 - Fix race conditions for corner cases when handling SIGTERM by minion bsc1172110 - Allow extrafilerefs ...

VMware Carbon Black Ranks Among Top 10 of 100 Cybersecurity Companies by the University of San Diego

We are proud to announce that VMware Carbon Black has been ranked within the top 10 organizations on the University of San Diego Cybersecurity Team’s annual list of the Top 100 Cybersecurity Companies of 2020. The annual list of cybersecurity companies highlights the most influential players in a...

VMware View Planner 4.6 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware View Planner Unauthenticated Log File Upload RCE', 'Description' = %q This module exploits an unauthenticated log file upload within the...

VMware View Planner 4.6 Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated log file upload within the loguploadwsgi.py file of VMWare View Planner 4.6 prior to 4.6 Security Patch 1. Successful exploitation will result in remote code execution as the apache user inside the appacheServer Docker container. This module...

Women in Security Part 3: Meet Marina Liang, Threat Researcher

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack In celebration of Women’s History Month, we’re excited to share the next blog in our six-part Women in Security series where we highlight outstanding women on the VMware Security Business Un...

Exploit for Path Traversal in Vmware Cloud_Foundation

PoC exploit for CVE-2021-21972, a remote code execution vulnerability in VMware vCenter 6.5-7.0. The exploit uploads the web shell "shell.jsp" to the target server, which is then executed to gain remote code execution. The exploit is invoked by running the Python script "vcenterrce.py" with the U...

Web vulnerabilities exploit weekly digest #1. March 8-15th 2021. VMware vCenter and Apache OFBiz RCE.

Welcome to the Wallarm weekly web exploits digest! Since this week, we will publish our weekly digests consists of web exploits with CVSS scores higher than 5. It will be followed by explanations, risks analysis, related stories and news. So, here we go! The most sophisticated and interesting...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 Works On - VMware-VCSA-all-6.7.0-8217866、VMware-VIM-all-6.7.0-8217866 ✔ - VMware-VCSA-all-6.5.0-16613358 ✔ For vCenter6.7 U2+ vCenter 6.7U2+ running website in memory,so this exp can't work for 6.7 u2+. Need test - vCenter 6.5 LinuxVCSA/Window Waiting For Test -...