path-auditor

PathAuditor PathAuditor es una herramienta diseñada para encontrar vulnerabilidades relacionadas con el acceso a archivos mediante la auditoría de funciones de libc. La idea es aproximadamente la siguiente: Auditar cada llamada a funciones libc relacionadas con el sistema de archivos realizada po...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

CVE-2026-3461

creationtimestamp| type| source ---|---|--- 2026-04-15 16:53:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkeb6ribo2h 2026-04-22 21:20:26+00:00| seen| Telegram/xHZW3dnIVlZ81UM5ayk21xAksqcQlWsb2BCoesl5IB3eE 2026-04-27 21:33:47+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2019-3461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rena...

CVE-2025-3461

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. This issue affects Quantenna Wi-Fi chipset through versi...

CVE-2025-3461 ON Semiconductor Quantenna Telnet Missing Authentication

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N...

Linux Distros Unpatched Vulnerability : CVE-2017-3461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.5.54 and...

Linux Distros Unpatched Vulnerability : CVE-2014-3461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to US...

CVE-2024-3461

creationtimestamp| type| source ---|---|--- 2025-02-14 10:05:07+00:00| seen| Telegram/AIeO1OX9rVcwFAKz0HOkZ3iphnrYd6kUx-2rcVyu-LGXes3H...

NewStart CGSL MAIN 6.02 : libtiff Multiple Vulnerabilities (NS-SA-2024-0051)

The remote NewStart CGSL host, running version MAIN 6.02, has libtiff packages installed that are affected by multiple vulnerabilities: - Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 9 : kernel (RHSA-2024:3461)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3461 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nftables: mark set ...

CVE-2021-3461

creationtimestamp| type| source ---|---|--- 2024-01-28 03:00:14+00:00| seen| https://t.me/arpsyndicate/3175...

CVE-2016-3461

creationtimestamp| type| source ---|---|--- 2024-01-07 08:29:55+00:00| seen| https://t.me/arpsyndicate/2628...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-3461)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3461

creationtimestamp| type| source ---|---|--- 2022-11-16 07:51:53+00:00| seen| https://t.me/cibsecurity/52981...

CVE-2022-3461

CVE-2022-3461 affects Phoenix Contact Automation Worx Software Suite up to version 1.89, specifically the PC Worx and Config+ components. The vulnerability arises from improper handling of manipulated project/files, leading to a heap buffer overflow and a read access violation, which could compro...

SUSE: Security Advisory (SUSE-SU-2022:3461-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MSC-2022-3461

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2021-3461

CVE-2021-3461 affects Keycloak and describes a flaw where Keycloak may fail to logout a user session when a logout request originates from an external SAML identity provider and the Principal Type is set to Attribute [Name]. The Connected documents corroborate this exact issue across multiple adv...