Wallarm Kubernetes Ingress Controller

Kubernetes is a popular technology which aims to improve how containers, microservices and other distributed components are managed across varied infrastructure. Since it was first announced by Google in 2014, it has grown in adoption and is now one of the leading system for automated deployment...

Exploit for CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly as...

Good Primer on Two-Factor Authentication Security

Stuart Schechter published a good primer on the security issues surrounding two-factor authentication. While it's often an important security measure, it's not a panacea. Stuart discusses the usability and security issues that you have to think about before deploying the system...

Setting Azure Accelerated Networking on an ELM deployed before version 4.13

Prior to App Layering 4.13, the ELM was provisioned with a NIC that did not have Azure Accelerated Networking enabled. This feature was not fully supported by Microsoft on Linux guests prior to this point. Please note that upgrading to App Layering 4.13 will NOT change the NIC configuration. The...

[SECURITY] Fedora 27 Update: docker-latest-1.13.1-37.git9cb56fd.fc27

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

IBM UrbanCode Deploy Directory Traversal Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

Linux Kernel IP Vulnerability 2

On the week of July 15th, researcher Juha-Matti Tilli disclosed a vulnerability in the Linux kernel to the kernel maintainers, the National Cyber Security Center - Finland NCSC-FI, CERT Coordination Center CERT/CC, and Akamai. The vulnerability, CVE-2018-5391, is a resource exhaustion attack...

wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)

It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...

wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)

It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...

wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)

It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4022236) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Server 2013: August 14, 2018

Description of the security update for SharePoint Server 2013: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...

Description of the security update for Excel 2016: August 14, 2018

None None...

Description of the Security Only update for .NET Framework 3.5 for Windows Server 2012 (KB 4344175)

Description of the Security Only update for .NET Framework 3.5 for Windows Server 2012 KB 4344175 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an...

Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4344166)

Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4344166 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an attacker to acce...

Description of the security update for Word Viewer: August 14, 2018

None None...

Description of the security update for Microsoft Office Viewers and Office Compatibility Pack: August 14, 2018

None None...

Description of the security update for Office 2010: August 14, 2018

Description of the security update for Office 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Security update for Adobe Flash Player: August 14, 2018

None None...

Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 (KB 4344172)

Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 KB 4344172 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments. The...