The vulnerability of the Astra Linux Directory service’s EPP management system, which is related to insufficient verification of data authenticity, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in obtaining the Samba domain name from the server in console mode. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the parsec inode permission module in the linux-astra-modules package, related to access control deficiencies for non-functional Unix sockets, allows a intruder to compromise data integrity.

The vulnerability of the parsec inode permission module in the linux-astra-modules package is related to deficiencies in access control for non-functional Unix sockets. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software programs. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Astra Linux Directory Service’s EPW management system, related to resource exhaustion, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to the issue of multiple software executions. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Astra Linux Directory service’s EPW management system, related to the escape of operations beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in setting the integrity of directories. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the input tool provided by Astra Linux SE/CE in the MS Windows AD domain “astra-winbind” allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Astra Linux SE/CE input device in MS Windows AD domain, known as astra-winbind, is related to a user login error. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

SUSE-SU-2020:0540-1 Security Beta update for Salt

This update fixes the following issues: salt: - Fix 'osfamily' grain for Astra Linux Common Edition - Update to Salt version 2019.2.3 CVE-2019-17361 bsc1163981 See release notes: https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html - Enable passing grains to start event based on...

SUSE-SU-2020:0538-1 Security Beta update for Salt

This update fixes the following issues: salt: - Fix 'osfamily' grain for Astra Linux Common Edition - Update to Salt version 2019.2.3 CVE-2019-17361 bsc1163981 See release notes: https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html - Enable passing grains to start event based on...

Wordpress Strong Testimonials 2.40.1 Plugin - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Strong Testimonials 2.40.0 - Persistent Cross-Site Scripting Vendor Homepage: https://strongtestimonials.com Vendor Changelog: https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt Exploit...

WAFW00F v2.0 - Allows One To Identify And Fingerprint Web Application Firewall (WAF) Products Protecting A Website

The Web Application FirewallFingerprinting Tool. — FromEnable Security How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...

The vulnerability of the FreeIPA service component of the Astra Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the FreeIPA service component in the Astra Linux operating system is related to an error in processing the contents of file descriptors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the fly-admin-int-check integrity control utility in the Astra Linux operating system, which allows a perpetrator to trigger a service failure.

The vulnerability of the fly-admin-int-check integrity control utility in the Astra Linux operating system is related to an unexpected termination of the program upon exit. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux allows a hacker to obtain the server LDAP administrator password.

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux is related to privilege management errors. Exploiting this vulnerability could allow a malicious individual to obtain the server LDAP administrator password...

The vulnerability of the astra-sambadc component of the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the astra-sambadc component of the Astra Linux operating system is related to improper interaction with the “Kerberos” authentication program. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the astra-winbind component of the Astra Linux operating system allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the astra-winbind component of the Astra Linux operating system is related to incorrect cleaning of PAM records when a node is removed from the domain, as well as the creation of publicly accessible resources during initialization. Exploiting this vulnerability allows an...

The vulnerability of the composite manager in the Astra Linux operating system allows a intruder to trigger a service failure.

The vulnerability of the Compton manager in the Astra Linux operating system is related to errors in multi-monitor configurations. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the dvd+rw-tools utility in the Astra Linux operating system, related to error handling, allows a intruder to cause a service failure.

The vulnerability of the dvd+rw-tools utility in the Astra Linux operating system is related to incorrect termination of writing operations. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux is related to incorrect configuration of security contexts when adding/removing users who are part of the administrator group. Exploiting this vulnerability allows a malicious actor to cause...

The vulnerability of the fly-admin-ftp component in the FLY operating environment of the Astra Linux system, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the ftp fly-admin-ftp component in the FLY operating environment of the Astra Linux system is related to the absence of changes in the access parameters for the root user directory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...