Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....
Search - Review
plg_search_jdownloads
Search - K2
Suche - Kategorien
Suche - Kontakte
Suche - Inhalt
Suche - Newsfeeds
Suche - Schlagwörter
Ajenti ist ein webbasiertes in Python geschriebenes Admin-Panel für Linux und FreeBSD (experimentell) mit moderner, AJAX basierter Oberfläche. Die Version 1.0 wurde im August 2013 veröffentlicht. Es gibt viele Plugins welche die browserbasierte Konfiguration erlauben:
ISPConfig (Internet Service Provider Configuration) wurde von der Projektfarm GmbH unter Till Brehm und Falko Timme entwickelt und zunächst unter 42go.de als proprietäre Software vertrieben.
Zentyal ist eine in Spanien entwickelte grafische Oberfläche für die Server-Version von Ubuntu 12.04. Dadurch wird die oft mühsame und zeitraubende manuelle Installation und Konfiguration eines eigenen Servers erheblich vereinfacht.
Webmin (Kunstwort aus Web-Administration) ist ein freies Programmpaket zur Fernverwaltung eines Rechners mit einem Unix-artigen Betriebssystem. Es lauscht im Hintergrund auf Anfragen aus dem Internet oder dem lokalen Netz.
-
Red Hat Security Advisory 2024-8678-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 14:00 pmRed Hat Security Advisory 2024-8678-03 - An update for grafana is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Issues addressed include a cross site scripting vulnerability.
Read more... -
Red Hat Security Advisory 2024-8679-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 14:00 pmRed Hat Security Advisory 2024-8679-03 - An update for podman is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Read more... -
Red Hat Security Advisory 2024-8680-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 14:00 pmRed Hat Security Advisory 2024-8680-03 - An update for mod_http2 is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and null pointer vulnerabilities.
Read more... -
Red Hat Security Advisory 2024-8675-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 13:59 pmRed Hat Security Advisory 2024-8675-03 - An update for buildah is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Read more... -
Red Hat Security Advisory 2024-8676-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 13:59 pmRed Hat Security Advisory 2024-8676-03 - Updated images that include numerous enhancements, security, and bug fixes are now available for Red Hat OpenShift Data Foundation 4.17.0 on Red Hat Enterprise Linux 9.
Read more... -
Red Hat Security Advisory 2024-8428-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 13:55 pmRed Hat Security Advisory 2024-8428-03 - Red Hat OpenShift Container Platform release 4.15.37 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include denial of service and traversal vulnerabilities.
Read more... -
Red Hat Security Advisory 2024-8337-03
Operating System: RedHat ≈ Packet Storm Oct 31, 2024 | 13:54 pmRed Hat Security Advisory 2024-8337-03 - Run Once Duration Override Operator for Red Hat OpenShift 1.1.2 for RHEL 9.
Read more... -
Red Hat Security Advisory 2024-8616-03
Operating System: RedHat ≈ Packet Storm Oct 30, 2024 | 15:21 pmRed Hat Security Advisory 2024-8616-03 - An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6[…]
Read more... -
Red Hat Security Advisory 2024-8617-03
Operating System: RedHat ≈ Packet Storm Oct 30, 2024 | 15:21 pmRed Hat Security Advisory 2024-8617-03 - An update for kernel is now available for Red Hat Enterprise Linux 9.
Read more... -
Red Hat Security Advisory 2024-8614-03
Operating System: RedHat ≈ Packet Storm Oct 30, 2024 | 15:20 pmRed Hat Security Advisory 2024-8614-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include null pointer and use-after-free vulnerabilities.
Read more... -
The Product Security Blog has moved!
Red Hat Security Blog Blog Posts Mar 19, 2019 | 19:38 pmRed Hat Product Security has joined forces with other security teams inside Red Hat to publish our content in a common venue using the Security channel of the Red Hat Blog.This move provides a wider variety of important Security topics,[…]
Read more... -
New Red Hat Product Security OpenPGP key
Red Hat Security Blog Blog Posts Aug 22, 2018 | 13:30 pmRed Hat Product Security has transitioned from using its old 1024-bit DSA OpenPGP key to a new 4096-bit RSA OpenPGP key.This was done to improve the long-term security of our communications with our customers and also to meet current key[…]
Read more... -
SPECTRE Variant 1 scanning tool
Red Hat Security Blog Blog Posts Jul 18, 2018 | 13:30 pmAs part of Red Hat's commitment to product security we have developed a tool internally that can be used to scan for variant 1 SPECTRE vulnerabilities. As part of our commitment to the wider user community, we are introducing this[…]
Read more... -
Red Hat’s disclosure process
Red Hat Security Blog Blog Posts Jul 10, 2018 | 13:00 pmLast week, a vulnerability (CVE-2018-10892) that affected CRI-O, Buildah, Podman, and Docker was made public before some affected upstream projects were notified. We regret that this was not handled in a way that lives up to our own standards around[…]
Read more... -
Join us in San Francisco at the 2018 Red Hat Summit
Red Hat Security Blog Blog Posts Apr 23, 2018 | 14:30 pmThis year’s Red Hat Summit will be held on May 8-10 in beautiful San Francisco, USA.Product Security will be joining many Red Hat security experts in presenting and assisting subscribers and partners at the show.Here is a sneak peek at[…]
Read more... -
Certificate Transparency and HTTPS
Red Hat Security Blog Blog Posts Apr 17, 2018 | 15:00 pmGoogle has announced that on April 30, 2018, Chrome will:“...require that all TLS server certificates issued after 30 April, 2018 be compliant with the Chromium CT Policy. After this date, when Chrome connects to a site serving a publicly-trusted certificate[…]
Read more... -
Let's talk about PCI-DSS
Red Hat Security Blog Blog Posts Feb 28, 2018 | 14:30 pmFor those who aren’t familiar with Payment Card Industry Data Security Standard (PCI-DSS), it is the standard that is intended to protect our credit card data as it flows between systems and is stored in company databases.PCI-DSS requires that all[…]
Read more... -
Security is from Mars, Developers are from Venus…...or ARE they?
Red Hat Security Blog Blog Posts Nov 16, 2017 | 15:00 pmIt is a tale as old as time.Developers and security personnel view each other withsuspicion.The perception is that a vast gulf of understanding and ability lies between the two camps.“They can’t possibly understand what it is to do my job!”[…]
Read more... -
Abuse of RESTEasy Default Providers in JBoss EAP
Red Hat Security Blog Blog Posts Oct 18, 2017 | 13:30 pmRed Hat JBoss Enterprise Application Platform (EAP) is a commonly used host for Restful webservices. A powerful but potentially dangerous feature of Restful webservices on JBoss EAP is the ability to accept any media type. If not configured to accept[…]
Read more... -
Kernel Stack Protector and BlueBorne
Red Hat Security Blog Blog Posts Sep 12, 2017 | 11:51 amToday, a security issue called BlueBorne was disclosed, a vulnerability that could be used to attack sensitive systems via the Bluetooth protocol. Specifically, BlueBorne is a flaw where a remote (but physically quite close) attacker could get root on a[…]
Read more...
-
Debian: DSA-5801-1: firefox-esr Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 31, 2024 | 13:36 pm
Read more...
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scripting, spoofing or information disclosure. -
Debian Security Advisory 5800-1
Operating System: Debian ≈ Packet Storm Oct 30, 2024 | 15:38 pmDebian Linux Security Advisory 5800-1 - Jan-Niklas Sohn discovered that a heap-based buffer overflow in the _XkbSetCompatMap function in the X Keyboard Extension of the X.org X server may result in privilege escalation if the X server is running privileged.
Read more... -
Debian: DSA-5800-1: xorg-server Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 29, 2024 | 18:36 pm
Read more...
Jan-Niklas Sohn discovered that a heap-based buffer overflow in the _XkbSetCompatMap function in the X Keyboard Extension of the X.org X server may result in privilege escalation if the X server is running privileged. -
Debian Security Advisory 5798-1
Operating System: Debian ≈ Packet Storm Oct 28, 2024 | 14:08 pmDebian Linux Security Advisory 5798-1 - Christoper L. Shannon discovered that the implementation of the OpenWire protocol in Apache ActiveMQ was susceptible to the execution of arbitrary code.
Read more... -
Debian Security Advisory 5799-1
Operating System: Debian ≈ Packet Storm Oct 28, 2024 | 14:08 pmDebian Linux Security Advisory 5799-1 - Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more... -
Debian Security Advisory 5796-1
Operating System: Debian ≈ Packet Storm Oct 28, 2024 | 14:07 pmDebian Linux Security Advisory 5796-1 - Multiple security issues were found in libheif, a library to parse HEIF and AVIF files, which could result in denial of service or potentially the execution of arbitrary code.
Read more... -
Debian Security Advisory 5797-1
Operating System: Debian ≈ Packet Storm Oct 28, 2024 | 14:07 pmDebian Linux Security Advisory 5797-1 - Multiple security issues were found in Twisted, an event-based framework for internet applications, which could result in incorrect ordering of HTTP requests or cross-site scripting.
Read more... -
Debian: DSA-5799-1: chromium Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 28, 2024 | 06:25 am
Read more...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. -
Debian: DSA-5798-1: activemq Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 26, 2024 | 10:50 am
Read more...
Christoper L. Shannon discovered that the implementation of the OpenWire protocol in Apache ActiveMQ was susceptible to the execution of arbitrary code. -
Debian: DSA-5797-1: twisted Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 25, 2024 | 18:12 pm
Read more...
Multiple security issues were found in Twisted, an event-based framework for internet applications, which could result in incorrect ordering of HTTP requests or cross-site scripting. -
Debian: DSA-5796-1: libheif Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 25, 2024 | 18:10 pm
Read more...
Multiple security issues were found in libheif, a library to parse HEIF and AVIF files, which could result in denial of service or potentially the execution of arbitrary code. -
Debian Security Advisory 5794-1
Operating System: Debian ≈ Packet Storm Oct 22, 2024 | 15:51 pmDebian Linux Security Advisory 5794-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure.
Read more... -
Debian Security Advisory 5795-1
Operating System: Debian ≈ Packet Storm Oct 22, 2024 | 15:51 pmDebian Linux Security Advisory 5795-1 - Cedric Krier discovered that python-sql, a library to write SQL queries in a pythonic way, performed insufficient sanitizing which could result in SQL injection.
Read more... -
Debian: DSA-5795-1: python-sql Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 21, 2024 | 20:55 pm
Read more...
Cedric Krier discovered that python-sql, a library to write SQL queries in a pythonic way, performed insufficient sanitising which could result in SQL injection. -
Debian: DSA-5794-1: openjdk-17 Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 21, 2024 | 18:19 pm
Read more...
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. For the stable distribution (bookworm), these problems have been fixed in -
Debian Security Advisory 5793-1
Operating System: Debian ≈ Packet Storm Oct 21, 2024 | 12:46 pmDebian Linux Security Advisory 5793-1 - Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more... -
Debian: DSA-5793-1: chromium Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 20, 2024 | 07:45 am
Read more...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. -
Debian Security Advisory 5792-1
Operating System: Debian ≈ Packet Storm Oct 15, 2024 | 14:22 pmDebian Linux Security Advisory 5792-1 - The following vulnerabilities have been discovered in the WebKitGTK web engine. Hafiizh and YoKo Kho discovered that visiting a malicious website may lead to address bar spoofing. Narendra Bhati discovered that a malicious website[…]
Read more... -
Debian: DSA-5792-1: webkit2gtk Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Oct 14, 2024 | 21:53 pm
Read more...
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866 -
Debian Security Advisory 5791-1
Operating System: Debian ≈ Packet Storm Oct 14, 2024 | 13:43 pmDebian Linux Security Advisory 5791-1 - Elyas Damej discovered that a sandbox mechanism in ReportLab, a Python library to create PDF documents, could be bypassed which may result in the execution of arbitrary code when converting malformed HTML to a[…]
Read more...
-
Ubuntu Security Notice USN-7087-1
Operating System: Ubuntu ≈ Packet Storm Oct 31, 2024 | 14:01 pmUbuntu Security Notice 7087-1 - It was discovered that libarchive incorrectly handled certain RAR archive files. If a user or automated system were tricked into processing a specially crafted RAR archive, an attacker could use this issue to cause libarchive[…]
Read more... -
Ubuntu Security Notice USN-7086-1
Operating System: Ubuntu ≈ Packet Storm Oct 31, 2024 | 14:01 pmUbuntu Security Notice 7086-1 - Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains,[…]
Read more... -
Ubuntu Security Notice USN-7021-5
Operating System: Ubuntu ≈ Packet Storm Oct 31, 2024 | 14:01 pmUbuntu Security Notice 7021-5 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
Read more... -
Ubuntu Security Notice USN-7076-2
Operating System: Ubuntu ≈ Packet Storm Oct 31, 2024 | 14:01 pmUbuntu Security Notice 7076-2 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
Read more... -
Ubuntu Security Notice USN-7084-2
Operating System: Ubuntu ≈ Packet Storm Oct 31, 2024 | 14:00 pmUbuntu Security Notice 7084-2 - USN-7084-1 fixed vulnerability in urllib3. This update provides the corresponding update for the urllib3 module bundled into pip. It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects. A remote attacker could[…]
Read more... -
Ubuntu Security Notice USN-7085-2
Operating System: Ubuntu ≈ Packet Storm Oct 31, 2024 | 14:00 pmUbuntu Security Notice 7085-2 - USN-7085-1 fixed a vulnerability in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations in the[…]
Read more... -
Ubuntu Security Notice USN-7085-1
Operating System: Ubuntu ≈ Packet Storm Oct 30, 2024 | 15:38 pmUbuntu Security Notice 7085-1 - Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations in the X Keyboard Extension. An attacker could use this issue to cause the X Server to crash, leading to a denial[…]
Read more... -
Ubuntu Security Notice USN-7084-1
Operating System: Ubuntu ≈ Packet Storm Oct 30, 2024 | 15:37 pmUbuntu Security Notice 7084-1 - It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects. A remote attacker could possibly use this issue to obtain sensitive information.
Read more... -
Ubuntu Security Notice USN-7064-2
Operating System: Ubuntu ≈ Packet Storm Oct 29, 2024 | 15:18 pmUbuntu Security Notice 7064-2 - USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed[…]
Read more... -
Ubuntu Security Notice USN-7082-1
Operating System: Ubuntu ≈ Packet Storm Oct 23, 2024 | 14:32 pmUbuntu Security Notice 7082-1 - Gerrard Tai discovered that libheif did not properly validate certain images, leading to out-of-bounds read and write vulnerability. If a user or automated system were tricked into opening a specially crafted file, an attacker could[…]
Read more...
-
keycloak -- Missing server identity checks when sending mails via SMTPS
FreeBSD VuXML Oct 31, 2024 | 00:00 am
Read more... -
librewolf -- Undefined behavior in selection node cache
FreeBSD VuXML Oct 30, 2024 | 00:00 am
Read more... -
hwloc2 -- Denial of service or other unspecified impacts
FreeBSD VuXML Oct 29, 2024 | 00:00 am
Read more... -
forgejo -- multiple vulnerabilities
FreeBSD VuXML Oct 29, 2024 | 00:00 am
Read more... -
chromium -- multiple security fixes
FreeBSD VuXML Oct 26, 2024 | 00:00 am
Read more... -
chromium -- multiple security fixes
FreeBSD VuXML Oct 26, 2024 | 00:00 am
Read more... -
Gitlab -- vulnerabilities
FreeBSD VuXML Oct 24, 2024 | 00:00 am
Read more... -
electron31 -- multiple vulnerabilities
FreeBSD VuXML Oct 24, 2024 | 00:00 am
Read more...
-
Glibc Tunables Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 21, 2023 | 14:20 pmA buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. It has been dubbed Looney Tunables. This issue allows an local attacker to use maliciously crafted GLIBC_TUNABLES when launching binaries with SUID[…]
Read more... -
GNOME Files 43.4 Privilege Escalation
Operating System: Fedora ≈ Packet Storm Aug 8, 2023 | 15:54 pmGNOME Files version 43.4 (nautilus) on Fedora 37 will extract zip archives with setuid files for other user identifiers that can be leveraged to escalate privileges.
Read more... -
Apache Tomcat Privilege Escalation
Operating System: Fedora ≈ Packet Storm Mar 14, 2023 | 14:39 pmThis Metasploit module exploits a vulnerability in RedHat based systems where improper file permissions are applied to /usr/lib/tmpfiles.d/tomcat.conf for Apache Tomcat versions before 7.0.54-8. The configuration files in tmpfiles.d are used by systemd-tmpfiles to manage temporary files including their creation.[…]
Read more... -
Sequoia: A Deep Root In Linux's Filesystem Layer
Operating System: Fedora ≈ Packet Storm Jul 21, 2021 | 16:10 pmQualys discovered a size_t-to-int conversion vulnerability in the Linux kernel's filesystem layer: by creating, mounting, and deleting a deep directory structure whose total path length exceeds 1GB, an unprivileged local attacker can write the 10-byte string "//deleted" to an offset[…]
Read more... -
Fedora / Gnome fscaps Issue
Operating System: Fedora ≈ Packet Storm Jun 22, 2021 | 19:20 pmFedora with Gnome has an issue where it is not using fscaps safely.
Read more... -
netkit-telnet 0.17 Remote Code Execution
Operating System: Fedora ≈ Packet Storm Mar 5, 2020 | 20:57 pmnetkit-telnet version 0.17 telnetd on Fedora 31 BraveStarr remote code execution exploit.
Read more... -
vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 23, 2019 | 21:02 pmThis Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE and[…]
Read more... -
Grub2 grub2-set-bootflag Environment Corruption
Operating System: Fedora ≈ Packet Storm Nov 27, 2019 | 23:02 pmGrub2 has grub2-set-bootflag setuid in the new Fedora release and has the ability to corrupt the environment.
Read more... -
SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation
Operating System: Fedora ≈ Packet Storm Apr 19, 2019 | 13:28 pmThis Metasploit module attempts to gain root privileges by exploiting a vulnerability in the staprun executable included with SystemTap version 1.3. The staprun executable does not clear environment variables prior to executing modprobe, allowing an arbitrary configuration file to be[…]
Read more... -
Linux Nested User Namespace idmap Limit Local Privilege Escalation
Operating System: Fedora ≈ Packet Storm Nov 28, 2018 | 01:51 amThis Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root (CVE-2018-18955). The target system must have unprivileged user[…]
Read more...