9318 matches found
VPN daemon written in Go: GoVPN
GoVPN is simple secure virtual private network daemon. It uses Diffie-Hellman Encrypted Key Exchange DH-EKE for mutual zero-knowledge peers authentication and authenticated encrypted data transport. It is written entirely in Go programming language . All packets captured on a network interface ar...
CVE-2014-8682 Multiple Unauthenticated SQL Injections in Gogs
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Unauthenticated SQL Injection in Gogs repository search ======================================================= Researcher: Timo Schmid [email protected] Description =========== GogsGo Git Service is a painless self-hosted Git Service written in Go...
Elipse E3 - HTTP Denial of Service
Elipse E3 - HTTP Denial of Service // Exploit Http DoS Request for SCADA ATTACK Elipse 3 // Mauro Risonho de Paula Assumpção aka firebits // [email protected] // 29-10-2013 11:42 // Vendor Homepage: http://www.elipse.com.br/port/index.aspx // Software Link:...
Fedora 21 : golang-1.3.3-1.fc21 (2014-14130)
update to go1.3.3 bz1146882 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
[SECURITY] Fedora 21 Update: golang-1.3.3-1.fc21
The Go Programming Language...
Amazon Linux AMI : golang (ALAS-2014-437)
crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory...
Medium: golang
Issue Overview: crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors. Affected Packages: golang Issue Correction: Run yum update golang or yum update --advisory ALAS-2014-437 to update your system. N...
Fedora 20 : golang-1.3.3-1.fc20 (2014-12077)
update to go1.3.3 bz1146882 update to go1.3.2 bz1147324 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for golang FEDORA-2014-12077
Check the version of golang SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868389";...
Fedora Update for golang FEDORA-2014-11971
Check the version of golang SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868386";...
Fedora 19 : golang-1.3.3-1.fc19 (2014-11971)
update to go1.3.3 bz1146882 update to go1.3.2 bz1147324 more work to get cgo.a timestamps to line up, due to build-env Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...
[SECURITY] Fedora 19 Update: golang-1.3.3-1.fc19
The Go Programming Language...
[SECURITY] Fedora 20 Update: golang-1.3.3-1.fc20
The Go Programming Language...
Updated golang packages fix CVE-2014-7189
Updated golang packages fix security vulnerability: Go 1.1 through 1.3.2 has an issue that affects programs that use crypto/tls to implement a TLS server. If the server enables TLS client authentication using certificates and explicitly sets SessionTicketsDisabled to true in the tls.Config, then ...
MGASA-2014-0410 Updated golang packages fix CVE-2014-7189
Updated golang packages fix security vulnerability: Go 1.1 through 1.3.2 has an issue that affects programs that use crypto/tls to implement a TLS server. If the server enables TLS client authentication using certificates and explicitly sets SessionTicketsDisabled to true in the tls.Config, then ...
CVE-2014-7189
crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors...
Elipse E3 Scada PLC Denial Of Service
VSLA Security Advisory FIRE-SCADA-DOS-2013-001: Http DoS Requests Flooding Crash Device Vulnerabilities Elipse E3 Scada PLC. LEVEL: EXTREME In our tests authorized by the customer, we can stop the entire plant. Published: 10/29/2013 Version: 1.0 Vendor: Elipse...
CVE-2023-42434
CVE-2023-42434 is an iOS kernel vulnerability that, when operated, granted read and write access to the entire physical memory of the device. It was used in conjunction with CVE-2023-39606 as part of a multi-stage operation targeting the iOS kernel. The CVE entry itself has been rejected by its C...