Shadowsocks-libev version 3.1.0 suffers from a remote command execution vulnerability.
Source: Shadowsocks-libev 3.1.0 Command Execution
The post Shadowsocks-libev 3.1.0 Command Execution appeared first on MondoUnix.
Several issues have been identified, which allow attackers to manipulate log files, execute commands and to brute force Shadowsocks with enabled autoban.py brute force detection. Brute force detection from autoban.py does not work with suggested tail command. The key of captured Shadowsocks traffic can be brute forced. The latest commit 2ab8c6b on Sep 6, 2017 […]
The post Shadowsocks Log Manipulation / Command Execution appeared first on MondoUnix.
AlienVault USM version 5.4.2 suffers from a cross site request forgery vulnerability.
Source: AlienVault USM 5.4.2 Cross Site Request Forgery
The post AlienVault USM 5.4.2 Cross Site Request Forgery appeared first on MondoUnix.
Opentext Documentum Content Server (formerly known as EMC Documentum Content Server) does not properly validate input of the PUT_FILE RPC command which allows any authenticated user to hijack arbitrary file from the Content Server filesystem. Because some files on the Content Server filesystem are security-sensitive this security flaw leads to privilege escalation. Source: Opentext Documentum […]
The post Opentext Documentum Content Server File Hijack / Privilege Escalation appeared first on MondoUnix.
Opentext Documentum Content Server (formerly known as EMC Documentum Content Server) contains a design gap that allows any authenticated user the ability to replace content of security-sensitive dmr_content objects (for example, dmr_content related to …
Opentext Documentum Content Server (formerly known as EMC Documentum Content Server) contains a design gap that allows authenticated user to download arbitrary content files regardless of the attacker’s repository permissions. Source: Opentext Documentum Content Server File Download
The post Opentext Documentum Content Server File Download appeared first on MondoUnix.
SparkyLinux SparkyLinux è una distribuzione Linux leggera basata su versioni customizzate di Enlightenment e LXDE, adatta sia ai vecchi che hai nuovi computer. Si basa sul ramo testing di Debian. Versione 5.1 Questa versione contiene (in Inglese): full system upgrade from Debian testing repos as of September 25, 2017 Linux kernel 4.12.13 as default (4.13.3-sparky […]
Related posts:
Video
Molti formati video possono essere letti da Kubuntu, usando i codec liberi nei repository. Questo include formati come gli MPEG ed altri formati video comuni. Per installare il supporto per…
Sabato 28 Ottobre 2017 si svolgerà in tutta Italia il Linux Day, la principale manifestazione italiana dedicata a Linux, al software libero, alla cultura aperta e alla condivisione.
L’edizione del 2017 del Linux Day è dedicata alla privacy e alla riservatezza personale e dunque vedrà molti talk incentrati su questo argomento.
Come da tradizione di Marco’s Box ho deciso di aprire uno spazio dedicato a tutti i lettori che si contribuiranno a questo evento. Se avete realizzato un talk che ritenete interessante e volete condividerlo con la community di Marco’s Box vi basterà scrivere un commento sotto questo post linkando i vostri lavori che verranno raccolti in un post dedicato.
Source: Even Pokemon Go Was Used By Russia To Meddle In The Election
The post Even Pokemon Go Was Used By Russia To Meddle In The Election appeared first on MondoUnix.
