EulerOS 2.0 SP5 : golang (EulerOS-SA-2019-1967)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an...

Debian DLA-1920-1 : golang-go.crypto security update

This package ignored the value of the Hash header, which allows an attacker to spoof it. An attacker can not only embed arbitrary Armor Headers, but also prepend arbitrary text to cleartext messages without invalidating the signatures. For Debian 8 'Jessie', this problem has been fixed in version...

EulerOS 2.0 SP5 : golang (EulerOS-SA-2019-1916)

According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications...

NetGain EM Plus 10.1.68 - Remote Command Execution

/ Exploit Title: NetGain EM Plus = v10.1.68 - Unauthorized Local File Inclusion Date: 15 September 2019 Exploit Author: azams / @TheRealAzams Vendor Homepage: http://netgain-systems.com Software Link: http://www.netgain-systems.com/free/ Version: v10.1.68 Tested on: Linux Install golang:...

Debian: Security Advisory (DLA-1920-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1920-1] golang-go.crypto security update

Package : golang-go.crypto Version : 0.0hg190-1+deb8u2 CVE ID : CVE-2019-11841 This package ignored the value of the Hash header, which allows an attacker to spoof it. An attacker can not only embed arbitrary Armor Headers, but also prepend arbitrary text to cleartext messages without invalidatin...

DLA-1920-1 golang-go.crypto - security update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.1.14 security and bug fix update

An update is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Fedora 29 : golang (2019-65db7ad6c7) (Ping Flood) (Reset Flood)

Rebase to go1.11.13 - Security fix for CVE-2019-9512, CVE-2019-9514 and CVE-2019-14809 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 30 : golang (2019-55d101a740) (Ping Flood) (Reset Flood)

Rebase to go1.12.9 - Security fix for CVE-2019-9512, CVE-2019-9514 and CVE-2019-14809 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for golang FEDORA-2019-55d101a740

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for golang FEDORA-2019-65db7ad6c7

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MGASA-2019-0251 Updated golang packages fix security vulnerabilities

Updated golang packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently...

Updated golang packages fix security vulnerabilities

Updated golang packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently...

[SECURITY] Fedora 29 Update: golang-1.11.13-1.fc29

The Go Programming Language...

[SECURITY] Fedora 30 Update: golang-1.12.9-1.fc30

The Go Programming Language...

openSUSE: Security Advisory for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork (openSUSE-SU-2019:2021-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-2021)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues : Docker : - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot bsc1143409. - CVE-2019-13509: Fixed an information leak in the debu...

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (important)

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork Announcement ID: openSUSE-SU-2019:2021-1 Rating: important References: 1100331 1121967 1138920 1139649 1142160 1142413 1143409 Cross-References: CVE-2018-10892 CVE-2019-13509...

UPDATE: Merlin v0.8.0

PenTestIT RSS Feed A week ago an update - Merlin v0.8.0 was released. There was a brief mention about Merlin in my post titled - List of Open Source C2 Post-Exploitation Frameworks. This new version includes several new features to increase Operations Security OPSEC and usability. One of the more...