5592 matches found
[SECURITY] Fedora 33 Update: coturn-4.5.2-1.fc33
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...
[SECURITY] Fedora 32 Update: coturn-4.5.2-1.fc32
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...
Fedora: Security Advisory for coturn (FEDORA-2021-32d0068851)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Gigamon GigaVUE-OS database plaintext storage redis password vulnerability
Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS versions 5.4 - 5.9, which originates from Redis database passwords stored in clear text. An attacker could use this vulnerability to obtain the database...
CVE-2020-23249
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
CVE-2020-23249
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
Design/Logic Flaw
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
CVE-2020-23249
CVE-2020-23249 affects GigaVUE-OS (GVOS) versions 5.4–5.9, where the Redis database password is stored in plaintext. The root cause is insecure storage of the Redis password, which could allow an attacker to obtain the database password and potentially perform further attacks. The connected docum...
CVE-2020-23249
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
Gigamon GigaVUE-OS 安全漏洞
Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS versions 5.4 - 5.9, which originates from Redis database passwords stored in clear text. An attacker could use this vulnerability to obtain the database...
NICER Protocol Deep Dive: Internet Exposure of etcd
Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...
ownCloud: Protocol Smuggling over LDAP password field
Privileges required: Admin Hi, "userldap" plugin can be leveraged to interact with internal services over various protocols. LDAP password field can be exploited with newline chars \r\n in order to communicate with protocols like SMTP, Redis and, generally speaking, with all services those speak...
CVE-2020-14147 affecting package redis 5.0.5-7
CVE-2020-14147 affecting package redis 5.0.5-7. A patched version of the package is available...
NICER Protocol Deep Dive: Internet Exposure of Redis
Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...
Exploit for Code Injection in Microsoft
somepocsuite 用于企业内部进行漏洞排查与验证的的pocsuite3验证POC代码（pocsuite3是知道创宇安全团队的开源漏洞测试框架）。 由于原Pocsuite已停止更新，因此将原来的POC代码全部重新改写并迁移到pocsuite3，原POC备份在PocsuiteV2中。 插件代码编写 使用pocsuite3 漏洞测试框架，插件编写请参考 pocsuite3 项目插件编写要求。 PoC 编写规范及要求说明 | 序号 | poc | 说明 | | ---- | --------------------------------------- |...
Xerror - Fully Automated Pentesting Tool
Xerror is an automated penetration tool , which will helps security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts. Xerror provides GUI easy to use menu driven options.Iinternal...
resource-agents security update
4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...
SUSE-OU-2020:3291-1 Optional update for python-redis and redis
This optional update for python-redis and redis provides the following fixes python-redis: - Update to version to 3.4.1 jscECO-2417 Move the username argument in the Redis and Connection classes to the end of the argument list. This helps those poor souls that specify all their connection options...
phpRedisAdmin Cross-Site Scripting Vulnerability
phpRedisAdmin is a web administration page for managing Redis for individual developers. A cross-site scripting vulnerability exists in phpRedisAdmin versions prior to 1.13.2, which stems from the login.php username parameter allowing XSS.No detailed vulnerability details are available at this ti...
