Tag: networks

Written by Rafael Silva

FortiClient (Windows) – privilege escalation in online installer due to incorrect working directory

FortiClient (Windows) – privilege escalation in online installer due to incorrect working directory https://ift.tt/AWelUC9 FortiClient (Windows) – privilege escalation in online installer due to incorrect working directory Summary An improper initialization [CWE-665] vulnerability in FortiClient (Windows) may allow a local attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer’s directory. Affected Products […]

Written by Rafael Silva

Fortinet Security Researchers Discover Multiple Vulnerabilities in AutoDesk Products: DWG TrueView, Navisworks & Design Review

Fortinet Security Researchers Discover Multiple Vulnerabilities in AutoDesk Products: DWG TrueView, Navisworks & Design Review https://ift.tt/SVd8qfO Affected platforms: Windows Impacted parties: Users of Autodesk DWG TrueView versions 2022.1.1 and earlier, 2021.1.1 and earlier, 2020.1.4 and earlier, 2019.1.3 and earlier Users of Autodesk Design Review versions 2018 Hotfix 4 and earlier Users of Autodesk Navisworks versions 2022.1 and earlier, 2021.2 and earlier, 2020.3 and earlier, 2019.5 and earlier Impact: Multiple Vulnerabilities leading to Arbitrary […]

Written by Rafael Silva

Microsoft Security Compliance Toolkit 1.0 (contains also Windows Policy Analyzer)

Microsoft Security Compliance Toolkit 1.0 (contains also Windows Policy Analyzer) https://ift.tt/Iqjh9GJ [German]Microsoft has released the Microsoft Security Compliance Toolkit 1.0 in Nov. 2021. This week I was asked if the Windows Policy Analyzer – a utility for analyzing and comparing Group Policy Objects (GPOs) – which has been available since 2016, is now being phased […]

Written by Rafael Silva

Why Upgraded Infrastructure Needs Interoperability and Security

Why Upgraded Infrastructure Needs Interoperability and Security https://ift.tt/T3ALSHG In the United States, the $1.2 Trillion Infrastructure Investment and Jobs Act is being called a “once-in-a-generation investment” in infrastructure. A lot of that money will flow to state and local governments throughout the nation. Virtually all of the infrastructure that is being repaired, replaced, or initiated […]

Written by Rafael Silva

Open Source Alternatives to Popular SaaS Products

Open Source Alternatives to Popular SaaS Products https://ift.tt/Cb7Q8zp API Platform Hoppscotch API development ecosystem Postman Auth & SSO Cerbos Granular access control Okta, Auth0 Auth & SSO Keycloak User authentication and session management framework Okta, Auth0 Auth & SSO OPAL (Permit.io) Authorization adminstration framework (Open Policy) Okta, Auth0 Auth & SSO Ory Identity platform Okta, […]

Written by Rafael Silva

Backup and Tech support using Ansible

Backup and Tech support using Ansible https://ift.tt/mQKIwXj Using Ansible to collect backup files ,show tech and see the versions of Cisco switches. Inventory file:- Create an inventory file [switches] R1 ansible_host=10.60.51.1 [switches:vars] ansible_connection=network_cli ansible_network_os=ios ansible_user=admin ansible_password=cisco ansible_become=yes ansible_become_method=enable Create a Yaml File:- Backup and show tech file will be saved on the root folder. — […]

Written by Rafael Silva

Multiple Apache Vulnerabilities fixed in 2.4.52

Multiple Apache Vulnerabilities fixed in 2.4.52 https://ift.tt/3myVxFB The Apache project released an advisory, describing the following vulnerabilities:1) CVE-2021-44790A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft […]