Sish - HTTP(S)/WS(S)/TCP Tunnels To Localhost Using Only SSH

An open source serveo/ngrok alternative. Deploy Builds are made automatically for each commit to the repo and are pushed to Dockerhub. Builds are tagged using a commit sha, branch name, tag, latest if released on main. You can find a list here. Each release builds separate sish binaries that can ...

CVE-2021-0233

A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service DoS by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board FFEB crash. Continued receipt of these packets will sustain the Denia...

CVE-2021-0239

In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit AFT manager process Evo-aftmand, responsible for handling Route, Class-of-Service CoS, Firewall operations within the packet forwarding engine PFE to crash and...

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS, which is caused by improper...

The vulnerability of the Packet Forwarding Engine (PFE) module in the JunOS operating system for MX series routers allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system for MX series routers is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

UBUNTU-CVE-2021-29943

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts...

The vulnerability of the Packet Forwarding Engine (PFE) module of the JunOS operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Moderate: Red Hat Bug Fix Advisory: Openshift Logging Bug Fix Release (5.0.2)

Openshift Logging Bug Fix Release 5.0.2 Openshift Logging Bug Fix Release 5.0.2 You use the Red Hat OpenShift Logging product to forward, store, and visualize log data from your cluster. Changes to the Red Hat OpenShift Logging product: If you did not set .proxy in the cluster installation...

CentOS 8 : flatpak (CESA-2021:1068)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1068 advisory. - flatpak: file forwarding feature can be used to gain unprivileged access to files CVE-2021-21381 Note that Nessus has not tested for this issue but has instea...

CVE-2021-3448

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ...

Oracle Linux 8 : flatpak (ELSA-2021-1068)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1068 advisory. 1.6.2-6 - Fix CVE-2021-21381 1938062 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Amazon Linux 2 : flatpak (ALAS-2021-1625)

The version of flatpak installed on the remote host is prior to 1.0.9-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1625 advisory. A sandbox escape flaw was found in the way flatpak handled special tokens in .desktop files. This flaw allows an attacker to gain...

RHEL 8 : flatpak (RHSA-2021:1074)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1074 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: file forwarding feature...

The vulnerability of the File Forwarding tool in application management and Flatpak environments allows a hacker to gain access to confidential data and compromise its integrity.

The vulnerability of the File Forwarding tool in application management and Flatpak environments is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

SQL Injection Vulnerability in Freight Forwarding Quotation System of Shenzhen Yonglian Tong Industry Co.

Shenzhen Yongliantong Industrial Co., Ltd. was established in 2000, which is a modernized and comprehensive import and export foreign trade company approved by the Ministry of Foreign Trade and Economic Cooperation. There is a SQL injection vulnerability in the freight forwarding quotation system...

flatpak: "file forwarding" feature can be used to gain unprivileged access to files

A sandbox escape flaw was found in the way flatpak handled special tokens in ".desktop" files. This flaw allows an attacker to gain access to files that are not ordinarily allowed by the app's permissions. The highest threat from this vulnerability is to confidentiality and integrity...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 7 : flatpak (RHSA-2021:1002)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1002 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: file forwarding feature...