21947 matches found
EulerOS 2.0 SP10 : openssl (EulerOS-SA-2025-1532)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...
OESA-2025-1500 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
CVE-2022-41415
creationtimestamp| type| source ---|---|--- 2025-05-08 20:23:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15605...
CVE-2025-47614
creationtimestamp| type| source ---|---|--- 2025-05-08 16:23:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15552...
CVE-2022-42206
creationtimestamp| type| source ---|---|--- 2025-05-08 14:23:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15521...
CVE-2022-49843
creationtimestamp| type| source ---|---|--- 2025-05-08 11:23:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15513...
Vehicular Communication Security: Multi-Channel and Multi-Factor Authentication
Secure and reliable communications are crucial for Intelligent Transportation Systems ITSs, where Vehicle-to-Infrastructure V2I communication plays a key role in enabling mobility-enhancing and safety-critical services. Current V2I authentication relies on credential-based methods over wireless...
GHSA-GJH7-P2FX-99VX
creationtimestamp| type| source ---|---|--- 2025-05-07 23:23:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15459...
CVE-2025-20221
creationtimestamp| type| source ---|---|--- 2025-05-07 21:31:45+00:00| published-proof-of-concept| https://t.me/cvedetector/24746...
RLSA-2024:0966 Moderate: opensc security update
The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fixes: OpenSC: Side-channel leaks while stripping...
opensc security update
An update is available for opensc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSC set of libraries and utilities provides support for working with...
RLSA-2024:0748 Important: container-tools:4.0 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: runc: file descriptor leak "Leaky Vessels" CVE-2024-21626 A Rocky Enterprise Software Foundation Security Bulletin which addresses further details about the Leaky...
RLSA-2024:0967 Moderate: opensc security update
The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fixes: OpenSC: Side-channel leaks while stripping...
CVE-2025-47664
creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15362...
CVE-2025-47454
creationtimestamp| type| source ---|---|--- 2025-05-07 17:22:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15356...
CVE-2022-3676
creationtimestamp| type| source ---|---|--- 2025-05-07 16:23:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15339...
CVE-2025-47488
creationtimestamp| type| source ---|---|--- 2025-05-07 14:22:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15313...
CVE-2025-47497
creationtimestamp| type| source ---|---|--- 2025-05-07 14:22:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15305...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
