🟢 Low ⏱ 5–15 min Last verified: 19 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: netdata — multiple vulnerabilities with streaming Upstream summary: Netdata reports: GHSA-xg38-3vmw-2978: Netdata Streaming Alert Command Injection GHSA-jx85-39cw-66f2: Netdata Streaming Authentication Bypass Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]
SFTP — это безопасный способ передачи файлов между локальным и удаленным серверами. Будучи значительно более безопасным, чем FTP, данный протокол использует туннель SSH для установления подключения и использует шифрование для передачи файлов в рамках интерактивного сеанса.
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7405-1 Related CVEs: CVE-2016-7142 CVE-2019-20917 CVE-2020-25269 Upstream summary: It was discovered that InspIRCd did not correctly handle certificate fingerprints, which could lead to spoofing. A remote attacker could possibly use […]
Introduction This guide explains how to Configure Disk Encryption with VeraCrypt on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with […]
A list of reserved keywords in JavaScript.
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-4347 Related CVEs: CVE-2020-14803 CVE-2020-14782 CVE-2020-14796 CVE-2020-14781 CVE-2020-14792 CVE-2020-14779 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
El autor seleccionó a Open Internet/Free Speech Fund para recibir una donación como parte del programa Write for DOnations. Cómo administrador del sistema, es una buena práctica…
🟠 High ⏱ 15–60 min Last verified: 19 May 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-0128 Related CVEs: CVE-2020-2583 CVE-2020-2655 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
Alerta is a web application used to consolidate and de-duplicate alerts from multiple monitoring systems and visualize them on a single screen. Alerta can integrate with many well-known monitoring tools like Nagios, Zabbix, Sensu, InfluxData Kapacitor, and…
