🟡 Medium ⏱ 10–30 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tinc — Buffer overflow Related CVEs: CVE-2018-16737 CVE-2018-16738 CVE-2018-16758 Upstream summary: tinc-vpn.org reports: The authentication protocol allows an oracle attack that could potentially be exploited. If a man-in-the-middle has intercepted […]
Because a Kubernetes deployment naturally entails multiple servers (i.e., Kubernetes nodes), it can be quite resource intensive in order to perform development and testing of a Kubernetes stack before shipping in production. For this reason, the Kubernetes authors maintain a companion project called minikube, which can work with a container framework like Docker in order to simulate a Kubernetes cluster running on a single machine.
InfluxDB 2.x is a purpose-built time-series database that stores metrics with nanosecond precision and exposes a powerful query language called Flux for aggregating and transforming that data. Telegraf is the official plugin-driven metrics collection agent from InfluxData — it ships over 200 input plugins covering everything from CPU and memory to Docker containers and SNMP […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4758-1 Related CVEs: CVE-2020-24553 Upstream summary: It was discovered that Go applications incorrectly handled uploaded content. If a user were tricked into visiting a malicious page, a remote attacker could […]
Snap is a modern application packaging format with powerful sandboxing and security features, including file system isolation, automatic updates and integrated dependency management. In this tutorial, you will create a Snap application and publish it on the Snap Store.
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2007:007 (see also SUSE bugzilla) Related CVEs: CVE-2006-4250 Upstream summary: Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5239-1 Related CVEs: CVE-2020-13956 Upstream summary: It was discovered that HttpClient mishandled certain input. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code. Table […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665 +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]
A popular web application framework, Ruby on Rails (often referred to as Rails) was designed to help you develop successful projects while writing less code. RVM lets you manage and work with multiple Ruby development environments and allows you to switch between them.
Administering relational databases from the command line can be a daunting proposition for many people. A project called phpMyAdmin aims to alleviate this issue by providing an easy to use web interface for MySQL. In this guide, we’ll discuss how to install and secure phpMyAdmin on top of a LEMP (Linux, Nginx, MariaDB, and PHP) stack on a CentOS 7 server.
