SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 Scanner SSLv3 pour Windows, Linux, macOS Turc Comment se produit la vulnérabilité ? Tout d’abord, le problème survient lors de la détermination de la taille en octets. En déterminant la taille en octets, si vous remarquez, la valeur NULL c’est-à-dire...

CVE-2022-3602-poc

CVE-2022-3602 PoC для DoS Переполнение буфера DoS в OpenSSL 3.0 3.0.7 Использование: $ gcc -o CVE-2022-3602 CVE-2022-3602.c -lpthread $ ./CVE-2022-3602 127.0.0.1 443...

CVE-2022-3602-and-CVE-2022-3786

CVE-2022-3602-и-CVE-2022-3786 Это скрипт обнаружения, который определяет, требуется ли аутентификация клиента на SSL-сервере; в этом случае серверы на базе OpenSSL 3.0.0–3.0.6 будут уязвимы к обеим уязвимостям CVE-2022-3602 и CVE-2022-3786 Предварительные требования python3 pip install -r...

spookyssl-pcaps

PCAP-файлы SpookySSL и сетевое покрытие PCAP или этого не было В связи с недавно раскрытой уязвимостью в OpenSSL v3.0 – v3.0.6 CVE-2022-3602, мы изучили, как попытка эксплуатации выглядит «на проводе». Этот репозиторий содержит PCAP-файлы различных сценариев эксплуатации, а также правила...

cve-2022-3602-and-cve-2022-3786-openssl-poc

Ce depot n’a pas de fichier README...

OpenSSL-2022

Уязвимость OpenSSL 2022 года - CVE-2022-3602/CVE-2022-3786 Этот репозиторий содержит операционную информацию о CVE-2022-3602 и CVE-2022-3786, двух уязвимостях в OpenSSL 3.0.0-3.0.6. Дополнительную информацию см.: Совет по безопасности OpenSSL FAQ в блоге OpenSSL Предупреждение CERT-Bund DE...

Photon OS 5.0: Nodejs PHSA-2023-5.0-91-0011

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0011. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-3602

creationtimestamp| type| source ---|---|--- 2026-07-01 18:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4hjvimt2o 2026-07-03 10:04:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcaezwlb2d...

CVE-2026-3602

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection (CVE-2026-3602)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection. Vulnerability Details CVEID:CVE-2026-3602 DESCRIPTION: IBM App Connect Enterprise is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally...

MiracleLinux 9 : openssl-3.0.1-43.el9 (AXSA:2022-3967:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3967:08 advisory. OpenSSL: X.509 Email Address Buffer Overflow CVE-2022-3602 OpenSSL: X.509 Email Address Variable Length Buffer Overflow CVE-2022-3786 Tenable has...

CVE-2021-3602 affecting package buildah for versions less than 1.41.4-2

CVE-2021-3602 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2012-3602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application...

CVE-2025-3602

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18449 2025-06-16 15:23:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqbwovudc2u...

CVE-2025-3602

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix pack 8 through fix pack 20 does not limit the depth of a GraphQL queries, which allows remote attackers to perform denial-of-service DoS attacks on t...

CVE-2025-3602

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix pack 8 through fix pack 20 does not limit the depth of a GraphQL queries, which allows remote attackers to perform denial-of-service DoS attacks on t...

CVE-2019-3602

Cross Site Scripting XSS vulnerability in McAfee Network Security Manager NSM Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML...

CVE-2007-3602

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250416T165455 2025-04-16T16:54:55Z. jscPED-11136: GO-2025-3595 Update to version 0.0.20250410T162706 2025-04-10T16:27:06Z. jscPED-11136: GO-2025-3601 GO-2025-3602 Patch Instructions: To install this SUSE update...

Linux Distros Unpatched Vulnerability : CVE-2021-3602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds e.g. Dockerfile RUN...