GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: conftest-fips, dynamic-localpv-provisioner-fips, falco, cluster-autoscaler-fips, k3d, falcoctl-fips, kiam, kubeflow-fips, kubernetes-csi-livenessprobe, bank-vaults-fips, terraform-provider-sendgrid, kubescape, terraform-provider-sendgrid-fips, dgraph, kube-oidc-proxy...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, kubevela, src, kubescape, slsa-verifier, kubeflow, cortex, falco, spark-operator, dgraph, buildkitd, aactl, k3d, scorecard, up, terraform-provider-sendgrid...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: apko, gitness, crossplane-provider-azure, secrets-store-csi-driver, falco, cluster-autoscaler-fips, falcoctl-fips, flux-notification-controller, kpt, prometheus-elasticsearch-exporter-fips, hugo, k8sgpt, secrets-store-csi-driver-provider-gcp, oauth2-proxy, kiam,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: node-problem-detector, dynamic-localpv-provisioner, metacontroller, dex, pulumi-language-yaml, pulumi, nginx-stable, secrets-store-csi-driver-provider-gcp, gitness, terraform, oauth2-proxy, kots, pulumi-kubernetes-operator, bom, wireguard-go, slsa-verifier,...

Zyxel Gateway / Access Point External DNS Request Vulnerability

Some Zyxel Access Points are prone to an information disclosure vulnerability where external DNS requests can be made. This VT has been deprecated and replaced by various device specific VTs. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced...

Zyxel USG/UAG/ATP/VPN/NXC External DNS Requests

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: External DNS Requests product: Zyxel USG/UAG/ATP/VPN/NXC series vulnerable version: see "Vulnerable / tested version" fixed version: see "Solution" CVE number: - impact:...

Asset Inventory for Network Perimeter: from Declarations to Active Scanning

In the previous post, I shared some of my thoughts about the good Asset Inventory system. Of course, for me as a Security Specialist, it would be great if IT will provide such magical system. But such an ideal situation is rarely possible. So now let's see how to build an Asset Inventory system...

Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction

Exploit Title: Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vendor Homepage: https://www.microsoft.com/ Version: 2010 CVE : CVE-2018-12571 Proof of Concept 1 Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for...

Multiple Zyxel P2000W wirieless Wi-Fi VoIP phones vulnerabilities

Information leak, external DNS servers access...