Linux & Cyber Security & Penetration Testing & Python

Tag: nessus kullanıcı ekleme

Eki 18

Nessus Command Line Interface

By Kayhan KAYIHAN in Security

Bilmeyenler için tek kelime ile nessus dan bahsetmek gerekir ise, nessus zafiyet taramaları için kullanılan aracın adı, tenable şirketi tarafından geliştirilmektedir. Bu yazımda kısaca nessus’ un komut satırı işlemlerinden bahsedeceğim, 1- Nessus CLI ile kullanıcı ekleme: # /opt/nessus/sbin/nessuscliadduser [username] 2- Nessus CLI ile kullanıcı silme: # /opt/nessus/sbin/nessusclirmuser [username] 3- Nessus CLI ile kullanıcıları …

Devamını oku

Social Media

RECENT VULNERABILITIES

CVE-2021-28042
Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.
CVE-2021-3377
The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.
CVE-2021-28041
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
CVE-2021-3420
A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
CVE-2020-29020
Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.
CVE-2020-29028
Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.
CVE-2020-29029
Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.
CVE-2020-29030
Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4.
CVE-2021-27255
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the refresh_status.aspx endpoint. The issue results from a lack of authentication required to start a service on the server. An attacker can leverage this […]
CVE-2021-27256
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_save.cgi. The issue results from the lack of proper […]

Last Tweets

@sans_isc 21 Ocak 2020

DeepBlueCLI: Powershell Threat Hunting i5c.us/2sILyot https://t.co/l98o1OdXbS
@c1982 21 Ocak 2020

Bugün 19:00'da @IzmirGophers 'da görüşürüz. Konumuz TDD ve Clean Architecture 🤟meetup.com/IzmirGophers/e…
@yakuter 20 Ocak 2020

Go serverlere güzel bir Türkçe e-kitap (PDF) paylaşayım. @ksckaan1 tarafından hazırlanmış, oldukça da güzel olmuş 👏… twitter.com/i/web/status/1…
@PuCCaa 16 Ocak 2020

Sonra yarım gün çalışıyorlar zaten diye kadınlar işe alınmasın. Verim alamıyoruz diye işten çıkartmalar olsun.. haa… twitter.com/i/web/status/1…
@kayhankayihan 14 Ocak 2020

#RDP ve #CryptoAPI zafiyeteri için hızla aksiyon almak faydalı olacaktır. Geçtiğimiz hafta yayınlanan Citrix zafiy… twitter.com/i/web/status/1…

Tag: nessus kullanıcı ekleme

Nessus Command Line Interface

Social Media

Category

RECENT VULNERABILITIES

Last Tweets

Recent Posts

Followed By

Links