nss security and bug fix update

3.53.1-17 - Fix various corner cases with ike v1 app b support. 3.53.1-16 - Fix the following CVE - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC. 3.53.1-15 - Revert some policy changes the generate ABI runtime issues. 3.53.1-14 - Add...

How to enable "Restore to Azure" Generation 2 VM Support

Feature Change in Veeam Backup & Replication 12.1 and higher Starting in Veeam Backup & Replication 12.1, the setting AzureEnableGeneration2VMRestore is now hard-coded to true. This change enables the restore to Microsoft Azure to generate Generation 2 VMsby default. Purpose This article document...

CVE-2021-27166

An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon...

CVE-2021-27166

An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon...

CVE-2021-27166

An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon...

CVE-2021-27166

CVE-2021-27166 affects FiberHome HG6245D devices (RP2613) and is described as a trust management issue that can be exploited via default/hard-coded credentials (e.g., enable password set to “gpon”). Several connected sources indicate credential-related weaknesses, including hard-coded/default pas...

CVE-2020-11915

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a setparams.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root...

Coturn 4.5.1.x Access Control Bypass

Loopback access control bypass in coturn by using 0.0.0.0, ::1 or :: as the peer address - Fixed version: 4.5.2 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-01-coturn-access-control-bypass - Coturn Security Advisory:...

Nxlog Community Edition 2.10.2150 - DoS (Poc)

Exploit Title: Nxlog Community Edition 2.10.2150 - DoS Poc Date: 15/12/2020 Exploit Author: Guillaume PETIT Vendor Homepage: https://nxlog.co Software Link: https://nxlog.co/products/nxlog-community-edition/download Version: 2.10.2150 Tested on: Linux Debian 10 && Windows Server 2019 CVE:...

CVE-2020-29378

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user to full administrative access by using the password !j@ly$z%x6x7q8c9z for the...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:2034-1 Rating: important References: 1050549 1067665 1170630 1172873 1175306 1175721 1176855 1176983 1177397 1177703 1177819 1177820 1178182 1178393 1178589 1178686 1178765 1178782 1178838 1178853...

Chengdu Enable Technology Co., Ltd Vocational College Smart Campus Platform Has Logic Flaw Vulnerability

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Vocational College Smart Campus Platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all...

Chengdu Enable Technology Co., Ltd. Enable Smart Campus Platform Has Logic Flaw Vulnerability

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Enable Smart Campus platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all sites using th...

Integer overflow

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

October CMS Security Breach

October CMS is an open source content management system CMS based on PHP and the Laravel web application framework. A security vulnerability exists in October 1.0.319 and versions prior to 1.0.470, which stems from an enabled enableSafeMode that allows specific Twig code to be written to escape t...

openGauss: Configuring Kerberos Authentication in openGauss

Use gsom to enable and disable Kerberos authentication in openGauss. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

GaussDB Kernel: Configuring Rsyslog for Unified Audit Logs

By default, unified audit logs are output to the Rsyslog on each CN. User root is authorized to configure and view the logs. Ensure that enablesecuritypolicy is Enabled. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

Cisco has disclosed a zero-day vulnerability – for which there is not yet a patch – in the Windows, macOS and Linux versions of its AnyConnect Secure Mobility Client Software. While Cisco said it is not aware of any exploits in the wild for the vulnerability, it said Proof-of-Concept PoC exploit...

Unauthorized Access Vulnerability in YN Smart Campus of Chengdu Enable Technology Co.

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. Chengdu Enable Technology Co., Ltd YN Smart Campus has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...