EUVD-2017-11282

Malware in sbrugna...

EUVD-2017-11362

Malware in sbrugna...

CVE-2017-2182

CVE-2017-2182 affects the Hands-on Vulnerability Learning Tool “AppGoat” Web Application (V3.0.2 and earlier). The issue allows remote attackers to obtain local files via unspecified vectors; the core details, affected component (AppGoat Web app), and impact are stated in public records, with no ...

Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution

Overview AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a remote code execution vulnerability. Note that this vulnerability is different from JVN80238098...

Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to information disclosure

Overview AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains an information disclosure vulnerability. Masato Kinugawa reported this vulnerability to IPA...

CVE-2017-2099

The CVE-2017-2099 entry concerns the Hands-on Vulnerability Learning Tool “AppGoat” for Web Application (V3.0.0 and earlier). The connected JVN entries and NVD description indicate a remote code execution vulnerability, but the vectors are not specified in the documents provided. Affected product...

CVE-2017-2100

The CVE-2017-2100 entry applies to the Hands-on Vulnerability Learning Tool “AppGoat” for Web Application, specifically versions up to V3.0.1. The vulnerability is a DNS rebinding issue that can allow arbitrary code execution when a user visits a malicious page, as described by JVN/Japanese advis...

CVE-2017-2102

Cross-site request forgery CSRF vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to cross-site request forgery

Overview AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a cross-site request forgery vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/...