32792 matches found
openssh security update
An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
libssh security update
An update is available for libssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...
Safari < 14.0 Multiple Vulnerabilities
Binary data 701462.pasl...
Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA
Introduction The modern software supply chain represents an ever-evolving threat landscape, with each package added to the manifest introducing new attack vectors. To meet industry requirements, organizations must maintain a fast-paced development process while staying up-to-date with the latest...
CKEditor Detection via CDN
Binary data cksourceckeditorcdndetect.nbin...
HCL BigFix Server Installed (Windows)
Binary data hclbigfixserverwininstalled.nbin...
Delta Electronics DIAEnergie Hard-coded JWT Key (CVE-2022-3214)
Binary data deltaelectronicsdiaenergiecve-2022-3214.nbin...
CVE-2023-32479
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by...
Ivanti Policy Secure 9.x / 22.x SSRF (CVE-2024-21893)
Binary data ivantipsCVE-2024-21893.nbin...
Ivanti Connect Secure 9.x / 22.x SSRF (CVE-2024-21893)
Binary data ivanticsCVE-2024-21893.nbin...
The vulnerability of the GoGoReleaser binary file extraction tool, related to the disclosure of information through registration files, allows a hacker to disclose the protected information.
The vulnerability of the GoGoReleaser binary file collection relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...
Ivanti Connect Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
Binary data ivanticsssrfrceCVE-2024-21893.nbin...
SUSE SLED15: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (SUSE-SU-2024:0327-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0327-1 advisory. - Updated jsch to version 0.2.15: - CVE-2023-48795: Fixed a prefix truncation issue that could lead to...
Ivanti Policy Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
Binary data ivantipsssrfrceCVE-2024-21893.nbin...
Vyper sha3 codegen bug
Summary There is an error in the stack management when compiling the IR for sha364. Concretely, the height variable is miscalculated. The vulnerability can't be triggered without writing the IR by hand. That is, it cannot be triggered from regular vyper code, it can only be triggered by using the...
GHSA-6845-XW22-FFXV Vyper sha3 codegen bug
Summary There is an error in the stack management when compiling the IR for sha364. Concretely, the height variable is miscalculated. The vulnerability can't be triggered without writing the IR by hand. That is, it cannot be triggered from regular vyper code, it can only be triggered by using the...
Persistence – Windows Setup Script
When the Windows Operating system is installed via a clean installation or via an upgrade, the Windows Setup binary is executed. The Windows setup allows… Continue reading - Persistence - Windows Setup Script...
[SECURITY] Fedora 38 Update: libebml-1.4.5-1.fc38
Extensible Binary Meta Language access library A library for reading and writing files with the Extensible Binary Meta Language, a binary pendant to XML...