About 35 results found. (Query 0.04200 seconds)
Posts about vulnerabilities | www.bentasker.co.uk
http://bentasker.i2p/categories/vulnerabilities.html
Skip to main content www.bentasker.co.uk Home Blog Documentation Videos Archive Tags Posts about vulnerabilities RSS feed Cross-domain tag search 2023-01-21 17:11 Misusing Microsoft Defender For Domain Blocking Bypass Shenanigans 2020-04-23 11:23 Cynet 360 Uses Insecure Control Channels 2019-07-16 11:41 The Curious Case of BitFi and Secret Persistence 2014-07-23 09:15 Vulnerability: Infiltrating a network via Powerline (HomePlugAV) adapters 2013-05-23 14:25 Checking for Outdated Joomla...
NetBSD 6.1.4 Security Advisories
http://netbsd.i2p/support/security/patches-6.1.4.html
Navigation: Home Recent changes NetBSD blog Presentations About Developers Gallery Ports Packages Documentation FAQ & HOWTOs The Guide Manual pages Wiki Support Community Mailing lists Bug reports Security Developers CVSWeb Mercurial Cross-reference Release engineering Projects list NetBSD 6.1.4 Security Advisories Below is the list of advisories applicable to the NetBSD 6.1.4 release: A description and resolution procedure for TCP LAST_ACK state memory exhaustion can be found in NetBSD Security...
Vulnerability Disclosure Policy (VDP)
http://snapwonders.i2p/vulnerability-disclosure-policy
What you can expect from us 9. Questions 10. Acknowledgements / People who have disclosed vulnerabilities to us 1. Purpose of the Vulnerability Disclosure Policy The security of our systems is very important to snapWONDERS. While we make every effort to keep our systems secure, vulnerabilities may still exist.
zzz.i2p: 0.7.10 and earlier - I2NP Message Parameter Checking
http://zzz.i2p/topics/554-0-7-10-and-earlier-i2np-message-parameter-checking
zzz.i2p Development updates Home Forum You are not logged in Login 0.7.10 and earlier - I2NP Message Parameter Checking « Security Alerts and Vulnerabilities « I2P Development   Mon, 15 Feb 2010, 03:42pm #1 zzz Administrator 0.7.10 and earlier contain some vulnerabilities related to checking of parameters in certain I2NP messages.
Security bounty — LocalMonero
http://lm.i2p/nojs/security-bounty-whitehat?dismissNotice=true
.) • Merely showing that a page can be iFramed without finding a link on the page to be click-jacked. • Self-XSS • Denial of service • Spamming • Vulnerabilities in third party applications which make use of the LocalMonero API • Vulnerabilities which involve privileged access (e.g. rooting a phone) to a victim's device(s) • Logout CSRF • User existence/enumeration vulnerabilities • Password complexity requirements • Reports from automated tools or scans...
Security bounty — AgoraDesk
http://agoradesk.i2p/nojs/security-bounty-whitehat?dismissNotice=true
.) • Merely showing that a page can be iFramed without finding a link on the page to be click-jacked. • Self-XSS • Denial of service • Spamming • Vulnerabilities in third party applications which make use of the AgoraDesk API • Vulnerabilities which involve privileged access (e.g. rooting a phone) to a victim's device(s) • Logout CSRF • User existence/enumeration vulnerabilities • Password complexity requirements • Reports from automated tools or scans...
Lupin (@0xLupin) | Nitter
http://nitter.catsarch.i2p/0xLupin
We solve real problems for our customers. On average, they uncover real vulnerabilities missed by other tools within 24 hours of onboarding. Just this year, we've already responsibly disclosed vulnerabilities in Vercel's Next.js, Grafana, Jetbrain's YouTrack, OpenAM, Metabase, and BeyondTrust's Remote Support Software.
/tech/ - Passwords in Tor Browser
http://lambdaplusjs.i2p/tech/160798
I'm so fucking tired from having to open password manager and login for every single site I want to use and the browser extensions for password manager aren't really recommended as they may have vulnerabilities and adding extensions to Tor Browser increases your fingerprint. Here is what Kicksecure thinkgs about using keepassxc extension.
Ethics Procedures [OS3 Website]
http://os3.i2p/info/ethics
Professionals and students often come into contact with sensitive information containing private personal information or related to vulnerabilities. During the course of the year we teach this to the students in different contexts. To cope with these issues in student projects we have defined Ethical Procedures for projects performed by students throughout the year.
D.U.C. - Reinventing Operating Systems
http://uhden.i2p/articles/systems.html
This approach enables significant architectural changes and removes vulnerabilities before they become entrenched. Apple: Innovation Without Constraints Apple, for its part, has shown that a controlled break with the past can unlock disruptive advances.
IPv6 support added | cryptostorm blog
http://cs.i2p/blog/ipv6
Originally, we didn't want to do IPv6 because when cryptostorm first started, the protocol had multiple vulnerabilities , and many implementations had their own vulnerabilities . These days, most IPv6 related vulnerabilities involve features that we're not using, so it should be safe enough to use now.
en:opensource:opensource-software [HowTo Yggdrasil]
http://yggdrasil.acetone.i2p/en:opensource:opensource-software
Transparency The open nature of open-source software fosters transparency, allowing users to inspect the code for security vulnerabilities, bugs, and potential issues. This transparency is often seen as a key factor in ensuring the security and reliability of open-source software. 5.
zzzmirror.i2p: How to use Apache or other web server instead of Jetty
http://zzzmirror.i2p/posts/62
In fact you probably don't want it on port 80, do you? Check for cgi-bin or other vulnerabilities. Think about adding a robots.txt since you may get crawled via the inproxy. - Stop the eepsite tunnel in i2ptunnel, edit to point to port 80 or whatever other port your new webserver is using, and restart the eepsite tunnel. - Comment out or edit out the Jetty startup in clients.config (probably clientApp.3.*) .
sigmaforum
http://sigma.i2p/post/59?reply_to=192
login / signup sigmaforum boards sigma reports content torrenting wishlist i2p anime ru soy tv post Critical Services in I2P by simp (member) in i2p 4 months ago (last active 4 months ago) Made a post on this here http://simp.i2p/blog/0030-30-10-2025-Critical%20Services%20in%20I2P basically the tl;dr is piggy backing off of the last major paper to hit on centrality vulnerability in i2p, but from the centralized services in i2p. which tend to also be operated by very few people. tracker2 is sort of i2p's...
1 similar result skipped
10channel
http://10channel.i2p/res/1437.html
[ Catalog ] Style Dark Green Futaba Burichan [ Return ] Posting mode: Reply Name E-mail Subject Message CAPTCHA   (enter the text below) Password   (for post and file deletion) tor is a piece of shit i2puser 05/13/25(Tue)14:11:13 No. 1437   >>1445 tor is a piece of shit ¨ Anonymous 05/14/25(Wed)03:35:33 No. 1441   >>1444 MY NIGGA ¨ Anonymous 05/14/25(Wed)09:33:16 No. 1444 >>1441 that's racist dawg ¨ Anonymous 05/14/25(Wed)10:10:32 No. 1445   >>1447 >>1437 at least we have a browser instead of 50 java...
Hire Us! - Hoodie
http://hxquaszpzcvdxdthlfgmme2327uyloulybfl6zfkfb6w4tml3pca.b32.i2p/hire-us
To contact from public network, use [email protected] 🔐 PGP Public Key We highly recommend encrypting any sensitive communications, especially regarding security vulnerabilities or private business details. Please use the public key below to verify our signed messages or to send us encrypted mail: -----BEGIN PGP PUBLIC KEY...
Ciphercraft Computational
http://ciphercraft.i2p
Lawyers will lose client confidentiality, victims of police misconduct will be spied on, journalists unable to protect sources, and domestic abusers gifted new ways to exploit tech vulnerabilities to spy on partners. Follow us to stay up-to-date with all of our latest news! Keep up to date with what is going on in Ciphercraft Computational.
LocalHTTPServer (I2P Anonymous Network - Java Documentation - API Version 0.9.69)
http://i2p-javadocs.i2p/net/i2p/i2ptunnel/localServer/LocalHTTPServer.html
There is basic protection here - FileUtil.readFile() prevents traversal above the base directory - but inproxy/gateway ops would be wise to block proxy.i2p to prevent exposing the docs/ directory or perhaps other issues through uncaught vulnerabilities. Restrict to the /themes/ directory for now. Parameters: sockMgr - only for /b32, otherwise ignored targetRequest - decoded path only, non-null query - raw (encoded), may be null allowGzip - may we send a gzipped response?
1 similar result skipped