1185 matches found
CVE-2023-32560
CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC 참조: https://www.tenable.com/security/research/tra-2023-27...
Ivanti Avalanche SmartDeviceServer - XML External Entity
XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. id: CVE-2024-38653 info: name: Ivanti Avalanche SmartDeviceServer - XML External Entity author: DhiyaneshDK severity: high description: | XXE in SmartDeviceServer in...
CVE-2023-41474
IVANTI AVALANCHE - 경로 탐색 PATH TRAVERSAL Ivanti Avalanche에서 새로운 취약점이 발견되었습니다. Avalanche Server v6.3.4.153에서 테스트되었으며 CVE-2023-41474로 식별되었습니다. 이는 제한된 인증 없는 경로 탐색 취약점으로, 인증되지 않은 공격자가 기본 구성에서 C:\PROGRAM DATA\Wavelink\AVALANCHE\Web\ webapps\AvalancheWeb 아래의 모든 파일에 접근할 수 있음을 의미합니다. 그러나 .xml 또는 .html과...
Ivanti Avalanche - Remote Code Execution
An unauthenticated attacker could achieve the code execution through a RemoteControl server. id: CVE-2023-32563 info: name: Ivanti Avalanche - Remote Code Execution author: princechaddha severity: critical description: An unauthenticated attacker could achieve the code execution through a...
Ivanti Avalanche 6.3.2 - Local File Inclusion
Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. id: CVE-2021-30497 info: name: Ivanti Avalanche 6.3.2 - Local File Inclusion author: gy741 severity: high description: Ivanti Avalanch...
Malicious code in cors-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c243bfa0251c11e10ceee74a90cffa2189086cf647ad8dfe6d70ab5e3491a5 Package impersonates the widely-used cors Express middleware. lib/index.js copies the legitimate expressjs/cors source but adds an exported getPlugin...
2026-07-tare-nightbox33-cloud
Tare contest details - Join Sherlock Discordhttps://discor...
Detecting Avalanche Effect in Adversarial Settings: Spotting the Encryption Loops in Ransomware
Spotting encryption loops in binary-only ransomware is a critical reverse engineering task. Since the existence of avalanche effect, an intrinsic characteristic of any secure encryption algorithms, is unavoidable during a victim data encryption attack, it is a very promising direction to spot...
Energy-Time Attack on Detectors in Quantum Key Distribution
Quantum key distribution is unbreakable in theory but may be hacked via imperfections in its hardware implementations. While many imperfections have been mitigated by countermeasures and advanced security proofs, several remain unsolved. One of these is a superlinear behaviour in single-photon...
Blockchain Communication Vulnerabilities
Blockchains are diverse in the way they handle communications between their nodes to disseminate information, mitigate attacks, and agree on the next block. While security vulnerabilities have been identified, they rely on an attack custom-made for a specific blockchain communication protocol. To...
CVE-2020-12442
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250...
@avalabs/avalanche-module (>=0.0.0-CP-8940-20240801175729, <=4.0.4), @avalabs/bitcoin-module (>=0.0.0-CP-8940-20240801175729, <=4.0.4) +20 more potentially affected by CVE-2025-64767 via @hpke/core (>=1.2.5, <=1.7.4)
@hpke/core NPM version =1.2.5, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0,...
EUVD-2020-4075
Malware in sbrugna...
EUVD-2020-4753
Malware in sbrugna...
EUVD-2018-20510
Malware in sbrugna...
EUVD-2018-20509
Malware in sbrugna...
EUVD-2024-22359
Malicious code in bioql PyPI...
EUVD-2024-26221
Malicious code in bioql PyPI...