4333 matches found
ForgeRock OpenAM < 7.0 Remote Code Execution
ForgeRock OpenAM is a popular access management software which is used to provide single sign-on SSO features to web applications. ForgeRock OpenAM versions below 7.0 suffer from a deserialization vulnerability, allowing a remote unauthenticated attacker to perform remote code execution on the...
Exploit for CVE-2020-1472
zeroscan Zeroscan is a Domain Controller vulnerability scanne...
Attack Surface Analysis Part 1: Vulnerability Scanning
In this three-part series, we’ll explore key considerations and strategies for choosing an attack surface analysis strategy, and the ways it can be used to increase awareness of both technical and process-related risks. We’ll start with vulnerability assessment below. BREACH!!! A word you may hea...
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:2263)
The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2263-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 - Mozilla: Thunderbird stored OpenPGP secret keys without...
Oracle Linux 7 : qt5-qtimageformats (ELSA-2021-2328)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2328 advisory. 5.9.7-2 - libwebp security fixes: Resolves: bz1961742 Resolves: bz1961743 Resolves: bz1961744 Resolves: bz1961745 Tenable has extracted the preceding...
Wallarm NG WAF is ranked as a “High Performer” by G2, Spring 2021!
We are proud to announce that Wallarm NG WAF was ranked as a “High performer” by G2 in the Web Application Firewall category. This award from the G2 platform confirms that our solution is highly rated by current verified Wallarm WAF users, who left unbiased reviews and answers to WAF-related...
WordPress 4.1.x < 4.1.33 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress 4.0.x < 4.0.33 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress 3.7.x < 3.7.36 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress 5.1.x < 5.1.10 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
APSoft-Web-Scanner-v2 - Powerful Dork Searcher And Vulnerability Scanner For Windows Platform
APSoftWebscanner Version 2 new version of APSoft Webscanner Version 1 Software pictures What can i do with this ? with this software, you will be able to search your dorks in supported search engines and scan grabbed urls to find their vulnerabilities. in addition , you will be able to generate...
Tenable Nessus Network Monitor Unsupported Version Detection
According to its self-reported version number, the installation of Tenable Nessus Network Monitor NNM on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...
Apache Tomcat < 7.0.78 Vulnerability
Binary data 701333.pasl...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Nettle vulnerability (USN-4906-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4906-1 advisory. It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash,...
AM Live Vulnerability Management Conference Part 2: What was I talking about there
Hello all! It is the second part about AM Live Vulnerability Management conference. In the first part I made the timecodes for the 2 hours video in Russian. Here I have combined all my lines into one text. What is Vulnerability Management? Vulnerability Management process is the opposite of the...
Nessus Network Monitor < 5.13.0 Multiple Vulnerabilities (TNS-2021-02)
The version of Nessus Network Monitor NNM installed on the remote host is prior to 5.13.0. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid147729; scriptversion"1.8";...
Node.js 8.5.x < 8.6.0 Path Traversal
Node.js version 8.5.0 included a change to ".." handling which caused a security vulnerability in the checks on paths made by some community modules. As a result, an attacker may be able to access file system paths other than those intended. This issue is fixed in version 8.6.0. No source data...
Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-sma-info-disclo-VOu2GHbZ)
An information disclosure vulnerability exists in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA due to confidential information being included in HTTP requests that are exchanged between the user and the device. An authenticated,...
OWASP ASST (Automated Software Security Toolkit) - A Novel Open Source Web Security Scanner
OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can be fatall...