2793 matches found
DEBIAN-CVE-2017-14316
A parameter verification issue was discovered in Xen through 4.9.x. The function allocheappages allows callers to specify the first NUMA node that should be used for allocations through the memflags parameter; the node is extracted using the MEMFgetnode macro. While the function checks to see if...
Product update: Virtuozzo 7.0 Update 5 Hotfix 1 (7.0.5-631)
The Hotfix 1 for Virtuozzo 7.0 Update 5 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PSBM-70449 Copying small service files stored on MDS could result in cluster unmount. Vulnerability id: PSBM-69911 VNC console in PowerPanel did not work for VMs running ...
[SECURITY] Fedora 26 Update: cyrus-imapd-3.0.3-1.fc26
The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...
Visualize network Topologies From pcap Files: PcapViz
PcapViz visualizes network topologies and provides graph statistics based on pcap files. It should be possible to determine key topological nodes or data exfiltration attempts more easily. Features Draw network topologies Layer 2 and communication graphs Layer 3 and 4 Network topologies contain...
Adobe Acrobat Pro DC XFA nodes Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...
PcapViz - Visualize Network Topologies and Collect Graph Statistics Based on PCAP Files
PcapViz visualizes network topologies and provides graph statistics based on pcap files. It should be possible to determine key topological nodes or data exfiltration attempts more easily. Features Draw network topologies Layer 2 and communication graphs Layer 3 and 4 Network topologies contain...
PT-2017-8642 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 6.2 Description: The issue allows local users with access to the system journal to obtain the root password by reading the system journal or by clicking Logs on the console, when the ssh service has been enabled on...
CVE-2017-8442
Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...
PT-2017-18334
Name of the Vulnerable Software and Affected Versions Elasticsearch X-Pack Security versions 5.0.0 through 5.4.3 Description The issue allows an authenticated Elasticsearch user to improperly view sensitive configuration information, including the paths and passphrases of SSL keys configured as...
Elastic Stack 5.5 Security update
Elasticsearch X-Pack Security user credentials disclosure ESA-2017-10 Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as...
How to Load Balance XenMobile Server Admin Portal
This article will guide you to load balance the XenMobile admin portal running on port 4443. Load balancing the admin portal will ease your XenMobile administration when you have cluster of XenMobile servers with which you can access the admin portal using one single load balancing IP instead of...
Ansible Agent Payload Deployer
This exploit module creates an ansible module for deployment to nodes in the network. It creates a new yaml playbook which copies our payload, chmods it, then runs it on all targets which have been selected default all. Module Options msf use exploit/linux/local/ansible/nodedeployer msf...
CVE-2016-3108
The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack...
CVE-2016-3108: Improper Link Resolution Before File Access
The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack...
CVE-2017-2508: Improper Neutralization of Input During Web Page Generation
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with container nodes...
PT-2017-15419
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.2 Safari versions prior to 10.1.1 Description The issue involves the WebKit component and allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with container...
Sybil Attacks
github.com/nebulouslabs/sia is vulnerable to sybil attacks. The attacks can be easily triggered because it does not prevent multiple connections from the same IP address. When bootstrap nodes are "full" i.e., 128 connections, it does not accept any new peers without disconnecting its current peer...
Product update: Virtuozzo Automator 7.0 Update 2 (VA MN: 7.0.2-266, VA Agent: 7.0.2-115)
The Update 2 for Virtuozzo Automator 7.0 provides new features and stability and usability bug fixes. Vulnerability id: PVA-36694 No 'Renew backup' button on virtual environment's backups tab. Vulnerability id: PVA-36693 Existing bridges were not used when attaching interfaces to virtual networks...
