nyxfqq

Results 5 issues of nyxfqq

**Issue Description:** I've identified a security vulnerability within the Chaos Monkey project when utilizing X509 certificates for TLS connections. Specifically, the issue revolves around the lack of server certificate verification...

# Description of the bug In the `Init` function of `index.go` located in `github.com/mickael-kerjean/filestash/server/plugin/plg_backend_ftp`, the FTPS (FTPs over TLS) connections are being established with the `InsecureSkipVerify` flag set to `true`....

# Description of the bug In the current implementation of the `ShareProofVerifier` function within `share.go` found at `github.com/m/mickael-kerjean/filestash/server/model`, the TLS verification is being bypassed when sending out email verification codes....

--- **Description:** I've encountered a significant security concern within the `sshForwardTransporter` handshake process in the `gost` library. Specifically, in the file `github.com/ginuerzh/gost/ssh.go` at line 229, there is a critical configuration...

## Issue Description I've identified a recurring pattern within several components of the Cortex project where TLS connections are established with `InsecureSkipVerify` set to `true`. This configuration allows the client...

enhancement