exozyme

11

#4 by a was closed 2022-01-18 17:44:49 +00:00

Replace TCP sockets for our services with Unix sockets

8

#87 by a was closed 2022-01-22 04:17:46 +00:00

Possible mitigations for the recent "minecraft" hack

7

#103 by a was closed 2022-02-02 23:46:13 +00:00

Woodpecker security issues

wontfix

4

#98 by a was closed 2022-01-22 17:13:08 +00:00

Use a stronger password hash function for LDAP users

4

#88 by a was closed 2022-01-18 18:00:32 +00:00

Use IPTables to block access to internal network resources

3

#194 by aryak was closed 2022-10-03 14:22:53 +00:00

Improve the dynamic website hosting experience

3

#131 by a was closed 2022-05-16 21:42:38 +00:00

Many services use regular HTTP behind nginx and exozyme users may be able to view that traffic

3

#82 by a was closed 2022-01-05 22:15:55 +00:00

exozyme users can ping the other devices on my home network

3

#23 by a was closed 2021-11-03 00:31:18 +00:00

Vulnerability disclosure: nginx can follow symlinks to sensitive files owned by the http user

2

#206 by a was closed 2023-07-10 20:27:50 +00:00

Investigate brute-force attacks against all exozyme services

31 minutes 37 seconds

2

#104 by a was closed 2022-01-28 22:45:38 +00:00 9 / 13

Clean up network ports

2

#79 by a was closed 2021-12-18 04:38:13 +00:00

All users have write access to the LGP server code

2

#32 by a was closed 2021-08-26 15:36:47 +00:00

Anyone can mount NFS shares and access important files

2

#10 by a was closed 2021-08-15 15:49:32 +00:00

Some PostgreSQL users have very weak passwords

2

#2 by a was closed 2021-08-14 22:08:28 +00:00

Vulnerability disclosure: Hijacking Synapse's port 8008 after triggering systemd-oomd with a Synapse memory leak

1

#172 by a was closed 2022-08-04 17:45:44 +00:00

Mastodon logins are acting quirky

1

#119 by a was closed 2022-02-24 02:33:33 +00:00

Deprecate OpenSearch

1

#117 by a was closed 2022-02-23 23:38:52 +00:00

Our OpenSearch server has no authentication

wontfix

1

#112 by a was closed 2022-02-18 15:47:12 +00:00

Journal logs are filled with SSH brute force attempts