4996 matches found
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0215
An update of 'glibc' packages of Photon OS has been released...
Node.js third-party modules: XSS in Bootbox
Hi. Sorry for taking the time with this report. This is already publicly disclosed issue at -https://github.com/makeusabrew/bootbox/issues/661 In essence all dialogs of bootbox vulnurable to XSS injections bootbox.alert"\alert1;"; This is apparently a feature to allow injecting HTML in messages...
Goca Scanner - FOCA fork written in Go
Goca is a FOCA fork written in Go, which is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages, and can be downloaded and analyzed with Goca. It is capable of analyzing a wide variety of documents, with the most common being...
Authentication flaw
In pfSense 2.4.41, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication the behavior does not match the sshguard documentation, which might make it easier for attackers to bypass...
CVE-2018-20799
In pfSense 2.4.41, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication the behavior does not match the sshguard documentation, which might make it easier for attackers to bypass...
[SECURITY] Fedora 29 Update: kernel-tools-4.20.11-200.fc29
This package contains the tools/ directory from the kernel source and the supporting documentation...
[SECURITY] Fedora 28 Update: kernel-tools-4.20.11-100.fc28
This package contains the tools/ directory from the kernel source and the supporting documentation...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0134
An update of 'binutils', 'linux', 'keepalived', 'rsyslog', 'glibc' packages of Photon OS has been released...
Fedora 29 : createrepo_c / dnf / dnf-plugins-core / dnf-plugins-extras / etc (2019-1fccede810)
createrepoc - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past - Support of zchunk libcomps librepo - Add zchunk support libdnf - Enhance modular solver to handle enabled and default module streams differently RhBug:1648839 - Add support of wild car...
Fedora 28 : mosquitto (2019-8cbe2a05cd)
Fixes for the following CVES : - CVE-2018-12546 - CVE-2018-12550 - CVE-2018-12551 The list of other fixes addressed in version 1.5.6 is: Broker : - Fixed comment handling for config options that have optional arguments. - Improved documentation around bridge topic remapping. - Handle mismatched...
[SECURITY] Fedora 29 Update: kernel-tools-4.20.8-200.fc29
This package contains the tools/ directory from the kernel source and the supporting documentation...
[SECURITY] Fedora 28 Update: kernel-tools-4.20.8-100.fc28
This package contains the tools/ directory from the kernel source and the supporting documentation...
CVE-2019-6974
creationtimestamp| type| source ---|---|--- 2019-02-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46388...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0130
An update of 'ruby' packages of Photon OS has been released...
CVE-2019-0672
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...
CANalyzat0r - Security Analysis Toolkit For Proprietary Car Protocols
This software project is a result of a Bachelor's thesis created atSCHUTZWERK in collaboration with Aalen University by Philipp Schmied. Please refer to the correspondingblog post for more information. Why another CAN tool? Built from scratch with new ideas for analysis mechanisms Bundles feature...
Assess Vulnerabilities, Misconfigurations in AWS Golden AMI Pipelines
Today we’re starting a blog series focused on how to integrate Qualys solutions into DevSecOps for securing cloud infrastructures. In this initial post, we’ll discuss the importance of assessing vulnerabilities and misconfigurations on AWS pipelines. When developing golden Amazon Machine Images...
CVE-2018-8796
creationtimestamp| type| source ---|---|--- 2019-02-06 15:04:30+00:00| seen| MISP/5c5af499-e890-49e9-b1ff-26ba0a021402...