Linux Vulnerability Scanner: Vuls

Vulnerability scanner for Linux, agentless, written in golang For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in production environment, it is common for system administrator to choose not to use...

openSUSE: Security Advisory for xen (openSUSE-SU-2016:0914-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2943-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2946-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Classic GO Weather Background - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Classic GO Weather Background published at the 'play' market has multiple vulnerabilities...

对康创联盛的一次安全检测（成功getshell并可访问数据库）

简要描述： 不得不说,我真是倒霉 详细说明： 本来是打算睡觉的,结果忽然想到那天看到的一个论坛,新架设的,问了下基友,未能getshell 原谅我地址已经忘了... 于是乎就继续看了一下 继续跑一下三级域名,发现admin.hd.comsenz-service.com 手工测试一下弱口令,运气还不错 test test123 进来了 有pic 有j8 涉及多个分站,不过多叙述 进来发现只是个虚拟机啊,还不能执行命令,懒得提权了,就随手翻了翻配置 127.0.0.1 localhost VM138131centos 127.0.0.1 www.comsenz-service.com...

innovaphone IP222 11r2 sr9 Brute Force

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-018 Product: innovaphone IP222 Manufacturer: innovaphone AG Affected Versions: 11r2 sr9 Tested Versions: 11r2 sr9 Vulnerability Type: Improper Restriction of Excessive Authentication Attempts CWE-307 Risk Level: Medium Solutio...

nmap 7.10 issued(an increase of 1 to 2 new scripts&bug fixes&increased os identification)-vulnerability warning-the black bar safety net

! This offering Namp 7.10 in the previous version on the basis of a lot improved! Add 1 2 A of the NSE scripts, hundreds of OS system and version fingerprint recognition, of course, there are also some small detail improvements and Bug fixes. The source code and for Linux, Windows, Mac system...

Disc ORGanizer (DORG) - Multiple Vulnerabilities

Disc ORGanizer DORG - Multiple Vulnerabilities Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=479 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-20...

BoxSoft WAV to MP3 Converter software vulnerability analysis CVE-2 0 1 5-7 2 4 3-the vulnerability warning-the black bar safety net

1, software description BoxSoft WAV to MP3 Converter is a 1 0 0% free powerful audio conversion tool that can Batch the WAV format files into high-quality MP3 audio files, it is equipped with a standard audio encoder, you can set the bit rate and a conversion of the plurality of audio files,...

Lynis 2.2.0 - Security Auditing Tool for Unix/Linux Systems

Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their Linux/Unix based systems. It runs on the host itself, so it can perform very extensive security scans. Supported operating system...

Jorgee Security Scanner

A vulnerability scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use the Jorgee security scanner to detect vulnerabilities on a target server...

Debian: Security Advisory (DSA-3509-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for postgresql93 (SUSE-SU-2016:0539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ldb (openSUSE-SU-2015:2354-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

eClinicalWorks Population Health (CCMR) SQL Injection / CSRF / XSS

Title: eClinicalWorks CCMR - Multiple Vulnerabilities Vendor: https://www.eclinicalworks.com Product: eClinicalWorks Population Health CCMR Client Portal Software URL: https://www.eclinicalworks.com/products-services/population-health-ccmr/ Credit: Jerold Hoong -----------------------------------...

Buffalo NAS Remote Shutdown

The Buffalo NAS device includes a web interface located at its IP address. A shutdown of the device can be initiated without confirmation by loading the endpoint /shutdown.html on this address. This shutdown powers off the device, requiring physical access to restart. The shutdown webpage has no...

war-path.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-126742 Description| Value ---|--- Affected Website:| war-path.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Mageia: Security Advisory (MGASA-2016-0005)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Capturing and Analyzing Network Flow Data: Joy

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring. Joy is a BSD-licensed libpcap-based software package for extracting data features from live network traffic or packet capture pcap files, using a flow-oriented mod...