EUVD-2024-25942

Malicious code in bioql PyPI...

CVE-2024-28872

The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service Kea or BIND 9,...

CVE-2024-28872

The CVE-2024-28872 issue affects ISC Stork versions 0.15.0 through 1.15.0 and stems from flawed TLS certificate validation. An attacker could obtain a TLS certificate from the Stork server and use it to connect to the Stork agent, then issue malicious commands to monitored services (Kea or BIND 9...

Internet Systems Consortium Stork Security Breach

Internet Systems Consortium Stork ISC Stork is an open source graphical administration from the Internet Systems Consortium organization. It is used to monitor, troubleshoot and maintain the configuration of Kea DHCP servers. A security vulnerability exists in Internet Systems Consortium Stork...