2110 matches found
vulhub
This is an open-source collection of vulnerable web applications and environments for testing and learning about web application security. It is a project maintained by phith0n and hosted on GitHub. The repository contains a variety of applications and environments, including CouchDB, FFmpeg, Git...
Machine Learning Testing for Data Scientists
In one software development project after another, it has been proven that testing saves time. Does this hold true for machine learning projects? Should data scientists write tests? Will it make their work better and/or faster? We believe the answer is YES! In this post we describe a full...
Terraguard - Create And Destroy Your Own VPN Service Using WireGuard
This project's goal is to be simple to create and destroy your own VPN service using WireGuard. Prerequisites Terraform = 1.0.0 Ansible = 2.10.5 How to Deploy Terraform Run with sudo is necessary because we need permission on localhost to install packages, configure a network interface and start ...
Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (important)
openSUSE Security Update: Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly Announcement ID: openSUSE-SU-2021:1819-1 Rating: important References: 1181255 SLE-13843 Cross-References: CVE-2021-3185 CVSS scores: CVE-2021-318...
Swift-Attack - Unit Tests For Blue Teams To Aid With Building Detections For Some Common macOS Post Exploitation Methods
Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and on disk binaries which should be easier for detection as well as post exploitation examples using API call...
CVE-2021-23845
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from...
CVE-2021-23845
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from...
CVE-2021-23845 B426 Web Configuration Authentication Bypass
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from...
CVE-2021-23845
CVE-2021-23845 (Bosch B426 Conettix). The Bosch B426 family (e.g., B426, B426-CN/B429-CN, B426-M) has an authentication/session handling issue in the web configuration interface that allows session hijacking due to an improper access control design. Public descriptions confirm the vulnerability w...
SUSE: Security Advisory (SUSE-SU-2020:1493-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-11184 · Silverstripe +3 · Silverstripe +2
SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity XXE attacks. When this developer utility is misused for purposes involving external or user submitted data in custom...
7.13: Upgrade Confluence to latest Adopt OpenJDK versions 11.0.12
This issue includes running tests against JDK 11 latest11.0.127 and also bundling this JDK in installer...
7.13: Upgrade Confluence to latest Adopt OpenJDK versions 11.0.12
This issue includes running tests against JDK 11 latest11.0.127 and also bundling this JDK in installer...
How to Implement Secure and Compliant IaC
Success lies in security True separation of developer and security teams is becoming a thing of the past. Today’s cloud environments enable deployments at previously unheard-of speed and scale; there simply isn’t time to build infrastructure, then code, then hand it all off for security...
python: Unsafe use of eval() on data retrieved via HTTP in the test suite
In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP...
rt-tests bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
rt-tests bug fix and enhancement update
An update is available for rt-tests. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...
CVE-2021-3315
In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible...
CVE-2021-3315
CVE-2021-3315 is a stored XSS vulnerability in JetBrains TeamCity, present on the test page, affecting TeamCity server versions prior to 2020.2.2. The connected documents consistently describe a stored XSS on the test page but do not provide detailed technical specifics (e.g., exploit vectors, ex...
