6494 matches found
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Path traversal with potential remote code execution Private objects exposed through project import Disclosure of notes via Elasticsearch integration Disclosure of comments via Elasticsearch integration DNS Rebind SSRF in various chat notifications Disclosure of vulnerability statu...
Kubernetes: Subdomain Takeover Via via Dangling NS records on Amazon Route 53 http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io
Good day, I truly hope it treats you great on your side of the screen : I have found that your website http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io is pointed via Name Server records to AWS route 53. These name server records have been deleted, I was able to create a matching zone...
Taking Reputation to Scale: An Iterative Journey with an Agile Approach (Part 2)
In Part 1 of this blog, we shared with you the challenges we had in balancing latency, scalability, and cost for our reputation services. In this blog, we’ll give you some insights into each major iteration along that journey, from the beginning to where we are now. 100 requests per second. Befor...
Critical Photon OS Security Update - PHSA-2019-0041
Updates of 'libarchive', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
Stripo Inc: Able to download any hosted content on AWS S3 bucket(stripo)
An AWS s3 bucket was found, with improper access controls, where all its contents could be downloaded. Steps to reproduce: 1. List contents of the bucket with: aws s3 ls s3://stripo 2. Download the hosted data with : aws s3 sync s3://stripo . Impact Any hosted data can be downloaded to an attacke...
Important Photon OS Security Update - PHSA-2019-0039
Updates of 'python3', 'python2', 'wpasupplicant', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
7 Courses That Will Help You Start a Lucrative Career in Information Security
As the world becomes more interconnected by the day, more and more companies of all sizes and industries are finding themselves under attack by fearless cybercriminals who can access their entire server farms from across the globe with only a few lines of code. And it's not just private...
Visit Akamai at AWS re:Invent 2019
From December 2-6, the Las Vegas Strip will be jam-packed with tens of thousands of developers, engineers, admins, architects, and other technologists for AWS re:Invent, the annual learning conference hosted by Amazon Web Services for the global cloud computing community. Akamai is excited to be ...
USN-4186-1: Linux kernel vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
USN-4184-1: Linux kernel vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
awswwweu.msgapp.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-1015370 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
fqhlu0rq5i.execute-api.us-east-1.amazonaws.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-1015341 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting fqhlu0rq5i.execute-api.us-east-1.amazonaws.com website and...
October Release: Q&A with Ari Weil
Shortly after Akamai announced the October 2019 Release with new features and capabilities across its security, performance and media product lines, Akamai's VP of Product Marketing, Ari Weil, took over Akamai's Twitter account for a live October Release Q&A. For those that missed the live event,...
CVE-2019-19781
An issue was discovered in Citrix Application Delivery Controller ADC and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. Recent assessments: kevthehermit at February 22, 2020 12:29am UTC reported: AWS had pre built AMIs for these appliances built and supplied to the...
Is AWS Liable in Capital One Breach?
Amazon is at least partly blame for the massive 2019 Capital One breach that impacted more than 100 million customers, senators are alleging. Security researchers however are of two minds. In a letter to the Federal Trade Commission FTC this week, U.S. senators Ron Wyden D-Ore. and Elizabeth Warr...
Critical Photon OS Security Update - PHSA-2019-3.0-0036
Updates of 'oniguruma', 'u-boot', 'etcd', 'systemd', 'gdb', 'sysstat', 'linux-aws', 'lua', 'polkit', 'linux', 'dbus', 'git', 'sqlite', 'linux-secure', 'linux-esx', 'rsyslog', 'python3', 'libgcrypt' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2019-0036
Updates of 'sysstat', 'gdb', 'rsyslog', 'polkit', 'sqlite', 'dbus', 'python3', 'etcd', 'lua', 'u-boot', 'libgcrypt', 'git', 'linux-esx', 'systemd', 'linux', 'linux-secure', 'linux-aws', 'oniguruma' packages of Photon OS have been released...
USN-4163-1: Linux kernel vulnerabilities
It was discovered that a race condition existed in the ARC EMAC ethernet driver for the Linux kernel, resulting in a use-after-free vulnerability. An attacker could use this to cause a denial of service system crash. CVE-2016-10906 It was discovered that a race condition existed in the Serial...
ec2-18-221-234-206.us-east-2.compute.amazonaws.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-1000158 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
Information Disclosure
ansible is vulnerable to information disclosure. The boto3 library logs credentials at log level DEBUG. This causes several ansible plugins to disclose AWS credentials in log files...