Redis Server Unprotected by Password Authentication

The Redis server running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

GitLab: Missing/Breach of Internal Security Boundary - Access to Job Queue Results in Remote Code Execution

Test Conditions ============= This issue was tested in GitLab Community Edition using a combination of code review against git commit 6c65b63ca5, April 20 2017 and testing likely issues against a local deployment of Bitnami GitLab Community Edition 9.0.5-0, running on Ubuntu 14.04.5. These are...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +195 more potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.72)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.0, =1.2 and more Source cves: CVE-2016-8735 Source advisory: MEND:CVE-2016-8735...

WTServer 17.02 DLL Hijacking

Title: WTServer-17.02 - DLL Loading Arbitrary Code Execution + Credits / Discovery: Nassim Asrir + Author Email: [email protected] + Author Company: Henceforth Vendor: =============== http://wtserver.wtriple.com/ Download: ===========...

GLSA-201702-16 : Redis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-16 Redis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, able to connect to a Redis instance, cou...

Fedora Update for redis FEDORA-2017-a1625d5c7b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Redis: Multiple vulnerabilities

Background Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache and message broker. Description Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details. Impact A remote attacker, able to...

PT-2017-4250 · Redis +1 · Redis +1

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 3.2.7 Description: The issue is related to the networking.c component of the Redis database management system, which lacks a check for POST and Host: strings. This allows for "Cross Protocol Scripting" and can be...

CVE-2017-5169

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Po...

CVE-2017-5169

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Po...

Cross site request forgery (csrf)

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Po...

CVE-2017-5169

CVE-2017-5169 affects Hanwha Techwin Smart Security Manager, versions 1.5 and earlier. The vulnerability is a Cross-Site Request Forgery in the Redis and Apache Felix Gogo servers installed with the product, enabling an attacker to issue specific HTTP POSTs that can gain system‑level access and l...

CVE-2017-5169

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Po...

CVE-2017-5169: Cross-Site Request Forgery (CSRF)

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Po...

Hanwha Techwin Smart Security Manager Cross-Site Request Forgery Vulnerability

Hanwha Techwin Smart Security Manager is the software management platform. Hanwha Techwin Smart Security Manager has a cross-site request forgery vulnerability in an installed Redis/Apache Felix Gogo server that can be exploited by an attacker to access a remote shell session...

PT-2017-16362

Name of the Vulnerable Software and Affected Versions Hanwha Techwin Smart Security Manager versions 1.5 and prior Description An issue was discovered in the product, where multiple Cross Site Request Forgery vulnerabilities exist within the Redis and Apache Felix Gogo servers. These flaws can be...

[SECURITY] Fedora 25 Update: redis-3.2.7-1.fc25

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

Fedora 25 : redis (2017-a1625d5c7b)

Upstream 3.2.7 important security fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Redis CSRF vulnerability analysis and preventive measures-vulnerability warning-the black bar safety net

Redis CSRF vulnerability analysis Recently the netizen exposed a Redis CSRF vulnerability, while Redis author in the latest release of the 3. 2. 7 also carried out the repair, this article on CSRF attack and how to safely use Redis. Ali cloud cloud database Redis version force require password...

By the MurmurHash2 algorithm, a collision caused by Redis DDos attack vulnerability

Summary information: 1. In Martin Bosslet 2012 this article, The author mentioned the MurmurHash2 algorithm was found to be the stable structure of the collision function, the hash function and its deformation is CRuby, JRuby, Rubinius, Redis, etc. open source components used. 2. This article is...