exozyme

#209 by a was closed 2023-10-10 02:10:18 +00:00

Vulnerability disclosure: nginx can follow symlinks to sensitive files owned by the http user

2

#206 by a was closed 2023-07-10 20:27:50 +00:00

Use IPTables to block access to internal network resources

3

#194 by aryak was closed 2022-10-03 14:22:53 +00:00

Vulnerability disclosure: New Jellyfin users are mistakenly made admins and can read the LDAP bind password

#174 by a was closed 2022-08-05 18:09:44 +00:00

Vulnerability disclosure: JupyterHub's proxied code-server sessions have no authentication and can be taken over

#173 by a was closed 2022-08-04 17:53:58 +00:00

Vulnerability disclosure: Hijacking Synapse's port 8008 after triggering systemd-oomd with a Synapse memory leak

1

#172 by a was closed 2022-08-04 17:45:44 +00:00

Discontinue NFS

question

4 minutes 59 seconds

#134 by a was closed 2022-05-13 23:35:33 +00:00

Improve the dynamic website hosting experience

help wanted

3

#131 by a was closed 2022-05-16 21:42:38 +00:00

Mastodon logins are acting quirky

1

#119 by a was closed 2022-02-24 02:33:33 +00:00

Deprecate OpenSearch

1

#117 by a was closed 2022-02-23 23:38:52 +00:00

Our OpenSearch server has no authentication

wontfix

1

#112 by a was closed 2022-02-18 15:47:12 +00:00

Investigate brute-force attacks against all exozyme services

31 minutes 37 seconds

2

#104 by a was closed 2022-01-28 22:45:38 +00:00 9 / 13

Possible mitigations for the recent "minecraft" hack

7

#103 by a was closed 2022-02-02 23:46:13 +00:00

Woodpecker security issues

wontfix

4

#98 by a was closed 2022-01-22 17:13:08 +00:00

Journal logs are filled with SSH brute force attempts

1

#94 by a was closed 2022-01-10 17:17:54 +00:00

Use a stronger password hash function for LDAP users

help wanted

4

#88 by a was closed 2022-01-18 18:00:32 +00:00

Replace TCP sockets for our services with Unix sockets

8

#87 by a was closed 2022-01-22 04:17:46 +00:00

Many services use regular HTTP behind nginx and exozyme users may be able to view that traffic

3

#82 by a was closed 2022-01-05 22:15:55 +00:00

Don't expose our OpenLDAP user management server to the public internet

help wanted

1

#80 by a was closed 2021-12-20 22:48:29 +00:00

Clean up network ports