FedSearch - Federated network search engine

The WA SOC has observed 3 new vulnerabilities affecting Citrix ADC and gateway products, notably CVE-2022-27510 has a CVSSv3 of 9.8. Appliances that have enabled SSL VPN functionality or are using ICA Proxy services have an authentication bypass vulnerability, that could be exploited for initial access.

https://wagov.github.io/wasocshared/#/advisories/20221110001-citrix-gateway-security-bulletin.md

#securityadvisory

Last updated 2 years ago

Original post

WA Security Operations Centre · @wasoc

22 followers · 10 posts · Server infosec.exchange

#securityadvisory
SEO poisoning targeting public sector (Gootloader) Advisory - 20221028001
https://wagov.github.io/wasocshared/#/advisories/20221028001-seopoisoning-gootloader-advisory.md

#securityadvisory

Last updated 2 years ago

Original post

Marcus · @mnw

241 followers · 1421 posts · Server tilde.zone

Just a little something to worry about in the morning. https://www.openssl.org/news/secadv/20220705.txt Just when you thought you were being safe with 2048 #openssl #securityadvisory

#openssl #securityadvisory

Last updated 2 years ago

Original post

Julien M. · @julm

485 followers · 4935 posts · Server framapiaf.org

#Qualys #SecurityAdvisory
> #Sequoia: A deep root in #Linux's #filesystem layer (#CVE-2021-33909)
> by creating, mounting, and deleting a deep
directory structure whose total path length exceeds 1GB [...]
> We [...] obtained full #root privileges on default installations
https://www.openwall.com/lists/oss-security/2021/07/20/1
#eBPF #infosec

#infosec #ebpf #root #cve #filesystem #linux #sequoia #securityadvisory #qualys

Last updated 3 years ago

Original post

Julien M. · @julm

485 followers · 4935 posts · Server framapiaf.org

#SecurityAdvisory #Infosec
> #Google Compute Engine (#GCE) VM takeover via #DHCP flood - gain root access by getting #SSH keys added by google_guest_agent
https://github.com/irsl/gcp-dhcp-takeover-code-exec

#ssh #dhcp #gce #google #infosec #securityadvisory

Last updated 4 years ago

Original post

Julien M. · @julm

485 followers · 4935 posts · Server framapiaf.org

#InfoSec #SecurityAdvisory
"Yesterday a patchset was merged to #Linux #Kernel mainline, which could be used to execute code in the kernel due to bugs in #PI #futexes."
https://www.openwall.com/lists/oss-security/2021/01/29/1
"commit is from 2008. So probably all currently maintained #Linux distros and deployments are affected, unless something else mitigated the issue in some kernel versions."
https://www.openwall.com/lists/oss-security/2021/01/29/3

#futexes #pi #kernel #linux #securityadvisory #infosec

Last updated 4 years ago

Original post

Julien M. · @julm

485 followers · 4935 posts · Server framapiaf.org

#Qualys #SecurityAdvisory #InfoSec
Heap-based buffer overflow in #Sudo (#CVE-2021-3156)

"This #vulnerability:
- is #exploitable by any local user (normal users and system users, sudoers and non-sudoers), without #authentication (i.e., the attacker does not need to know the user's password);
- was introduced in July 2011"
https://www.openwall.com/lists/oss-security/2021/01/26/3

#authentication #exploitable #vulnerability #cve #sudo #infosec #securityadvisory #qualys