1722 matches found
[SECURITY] Fedora 31 Update: rpki-client-6.7p1-1.fc31
The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...
OpenBSD OpenSSH <= 8.6 Command Injection Vulnerability
OpenBSD OpenSSH is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...
Exploit for OS Command Injection in Openbsd Openssh
It is an exploit for CVE-2020-15778, a command injection vulnerability in OpenSSH's SCP component. The vulnerability allows an attacker to inject malicious commands by passing a backtick-enabled payload as a file name, which is then executed by the local shell. The affected component is the SCP...
CVE-2020-16088
iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches...
CVE-2020-16088
iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches...
Authentication flaw
iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches...
CVE-2020-16088
OpenIKED (used in OpenBSD up to version 6.7) is affected by CVE-2020-16088. The root cause is the ca.c logic that checks whether a public key matches, enabling a bypass of authentication. Impact is a high-severity, network-exposed vulnerability with potential partial confidentiality, integrity, a...
CVE-2020-16088
iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches...
Exploit for Race Condition in Openbsd Openssh
Personal CTF Toolkit 此工具包最初是基于精灵表哥和一个佚名表哥的工具包整理的，后来加上本人打ctf和渗透时所添加的一些工具，应当还算全面傲娇脸。 QAQ 表哥们自然都有自己的kit，不过，互通有无总是好的嘛，看看下面目录里哪些有需要大家自取就好了（￣︶￣）↗ 包比较大，Github又慢，为了便于下载还是放在了网盘里： - 链接: https://pan.baidu.com/s/1u6NcfP-BkpXPYAnMUwjGHA 提取码: qv79 目录只放了三层，再多就太影响阅读。详细列表也上传了一份，愿意的话可以看看。 Note 部分工具运行时的目录中不可有空格或中文字...
openbsd-archive.7691.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181889 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-10030
An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname does not...
CVE-2020-10030
An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname does not...
Fedora 31 : opensmtpd (2020-283dc7f094)
Release 6.6.4p1 2020-02-24 --- - An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then executed as root. Separately, missing privilege revocation in smtpctl allows arbitrary commands to be run with the smtpq group. Release 6.6.3p1...
Fedora: Security Advisory for opensmtpd (FEDORA-2020-31216ab928)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 30 Update: opensmtpd-6.6.4p1-1.fc30
OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...
New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers
OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems. OpenSMTPD, also known as OpenBSD SMTP Server, is an open-source implementation of the Simple Mail Transfe...
New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers
OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems. OpenSMTPD , also known as OpenBSD SMTP Server, is an open-source implementation of the Simple Mail Transf...
OpenSMTPD Releases Version 6.6.4p1 to Address a Critical Vulnerability
OpenSMTPD has released version 6.6.4p1 to address a critical vulnerability. A remote attacker could exploit this vulnerability to take control of an affected server. OpenSMTPD is an open-source server-side implementation of the Simple Mail Transfer Protocol SMTP that is part of the OpenBSD Projec...
Exploit for Improper Handling of Exceptional Conditions in Openbsd Opensmtpd
cve-2020-7247 Exploit Title: OpenSMTPD 6.6.2 - Remote Code Exe...
2011/2012 Mac EFI firmware leaves BCM4331 wireless enabled when transferring control to the bootloader/OS
The EFI firmware on Macs contains a full-fledged network stack for downloading OS X images from osrecovery.apple.com. Unfortunately on Macs introduced 2011 and 2012, EFI brings up the Broadcom 4331 wireless card on every boot and leaves it enabled even after ExitBootServices has been called. The...