EnumJavaLibs is a tool that can be used to discover which libraries are loaded (i.e. available on the classpath) by a remote Java application when it supports deserialization.

DCNM exposes a file upload servlet (FileUploadServlet) at /fm/fileUpload. An authenticated user can abuse this servlet to upload a WAR to the Apache Tomcat webapps directory and achieve remote code execution as root. This module exploits two other vulnerabilities, CVE-2019-1619 for authentication bypass on versions 10.4(2) and below, and CVE-2019-1622 (information disclosure) to obtain the correct directory for the WAR file upload. This module was tested on the DCNM Linux virtual appliance 10.4(2), 11.0(1) and 11.1(1), and should work on a few versions below 10.4(2). Only version 11.0(1) requires authentication to exploit (see References to understand why).

This Metasploit module exploits command injection vulnerability in v-list-user-backups bash script file. Low privileged authenticated users can execute arbitrary commands under the context of the root user. An authenticated attacker with a low privileges can inject a payload in the file name starts with dot. During the user backup process, this file name will be evaluated by the v-user-backup bash scripts. As result of that backup process, when an attacker try to list existing backups injected payload will be executed.

This Metasploit module exploits an authenticated command injection vulnerability in the v-list-user-backups bash script file in Vesta Control Panel to gain remote code execution as the root user.

Cisco Data Center Network Manager version 11.2 remote code execution exploit.

Cisco Data Center Network Manager version 11.2.1 suffers from a remote SQL injection vulnerability.

Cisco Data Center Network Manager version 11.2.1 remote command injection exploit.

CA Technologies support is alerting customers about a medium risk vulnerability that may allow a local attacker to gain additional privileges with products using CA Common Services running on the AIX, HP-UX, Linux, and Solaris platforms. The vulnerability, CVE-2016-9795, occurs due to insufficient validation by the casrvc program. A local unprivileged user can exploit the vulnerability to modify arbitrary files, which can potentially allow a local attacker to gain root level access.

While governments grow more protectionist over trade and physical borders, companies such as Microsoft are bridging the gap by funding international collaborative enterprises.

FDI project numbers from China into the EU are on a downward trend, but Europe is still a popular destination for Chinese investment.

Alphabet Inc.’s Google said it would invest 1 billion euros ($1.1 billion) to expand its data center infrastructure in the Netherlands.

It may be safe for a bird to land on a wire, but not on two of them at once.

With its original commissioning dating back to 2008, NextEra’s 150-megawatt (MW) Endeavor Wind Energy Center I & II projects in Osceola County are undergoing a prudent re-powering process. Blattner Energy construction crews moved into the Osceola County wind farm area this spring and started work. Blatter Energy is an Avon, Minnesota based heavy construction contractor.

The cost of producing hydrogen gas with renewables is likely to plummet in the coming decades, making one of the most radical technologies for reducing greenhouse gases economical.

An onsite solar PV system in now operational at the most advanced cement factory in Cambodia.

Mayors from cities across the U.S. are stepping up and committing to broad and inspirational action to reduce greenhouse gas emissions and decarbonize local energy systems. This leadership is especially critical given lack of federal climate action, but translating a mayoral commitment to reality can be a challenge.

Yuba College, a community college part of the Yuba Community College District, this week completed a 1-MW solar carport installation that it says could result in $10 million of avoided utility costs over the life of the system. The District purchased the solar outright, which resulted in optimal savings.

A year ago, Tesla Inc. lost its throne as king of the U.S. rooftop solar business to Sunrun Inc. Now, it may get relegated to third place.

The U.K.’s push for a low-carbon economy has some notable successes, but the hardest part of the battle has barely started.

The cost of producing hydrogen gas with renewables is likely to plummet in the coming decades, making one of the most radical technologies for reducing greenhouse gases economical.

Compact sedans like the Elantra and Corolla mostly form the role of commuter cars in American households, and they’re spacious enough to be family vehicles for those with smaller kids or pets to put in the back seat. If your budget is tight, the 2020 Toyota Corolla and 2020 Hyundai Elantra are two of the best values on the market. They both...

Ice Energy, a California firm that uses chunks of ice to cool buildings, has secured $40 million in financing from private equity group Argo Infrastructure Partners LLC.

Last month, Delaware Governor John Carney signed Senate Bill 113 into law, enabling Commercial Property Assessed Clean Energy (C-PACE) financing in Delaware. Once implemented, PACE will offer a new method for financing commercial energy efficiency and renewable energy projects.

Latest market outlook report predicts that the country will get more than half of its power from hon-hydro renewables by 2030.

The U.K.’s push for a low-carbon economy has some notable successes, but the hardest part of the battle has barely started.

Alphabet Inc.’s Google said it would invest 1 billion euros ($1.1 billion) to expand its data center infrastructure in the Netherlands.

Korean biopharma company, PharmAbcine, is commencing full-scale clinical trials of a brain cancer treatment in the United States, following pioneering early phase trials in Australia.

Clean energy investments in India increased to $7.9 billion last year and are expected to surpass $10 billion in 2015.

Endesa Chile has unveiled a plan to develop 36 projects, amounting to 6300 MW of power in Brazil, Chile, Peru and Colombia. The board of directors are looking at hydroelectric power in particular for the bulk of the new capacity.

On Nov. 11, Germany-based Aquila Capital announced it has signed an agreement with four Norwegian utility companies -- Statkraft AS, Agder Energi, BKK and Skagerak Energi -- to acquire all shares of Smakraft AS, Norway's largest small-hydro company.  

Germany-based entrepreneurial firm, Aquila Capital, opened an office this month in Oslo, Norway, to coordinate investment and transaction management as well as operations in the hydropower sector.