Lucene search
+L

48 matches found

CNNVD
CNNVD
added 2025/03/24 12:00 a.m.10 views

Dante 代码注入漏洞

Dante is an application by the individual developer Miguel Michelson Martinez. A code injection vulnerability exists in Dante version 0.4.4 and earlier, which stems from a cross-site scripting attack that could lead to a remote attack...

5.4CVSS4.9AI score0.00376EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/02/26 12:00 a.m.5 views

Dante Discovery Detection (Windows)

Binary data dantediscoverywininstalled.nbin...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/02/18 12:00 a.m.8 views

openSUSE Security Advisory (openSUSE-SU-2025:0030-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.1AI score0.00516EPSS
SaveExploits0References3
CISA KEV Catalog
CISA KEV Catalog
added 2025/02/06 12:00 a.m.75 views

Dante Discovery Process Control Vulnerability

Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code...

7.8CVSS7.3AI score0.08533EPSS
SaveIn wildExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2025/01/24 12:00 a.m.8 views

Security update for dante (moderate)

openSUSE Security Update: Security update for dante Announcement ID: openSUSE-SU-2025:0030-1 Rating: moderate References: 1234688 Cross-References: CVE-2024-54662 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update for...

9.1CVSS9.3AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/23 7:01 p.m.7 views

OPENSUSE-SU-2025:0030-1 Security update for dante

This update for dante fixes the following issues: - Update to version 1.4.4 Fixed incorrect access control for some sockd.conf configurations involving socksmethod boo1234688, CVE-2024-54662...

9.1CVSS9.4AI score0.00516EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/12/19 3:49 a.m.6 views

SUSE CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

7.4CVSS7AI score0.00516EPSS
SaveExploits0References5
NVD
NVD
added 2024/12/17 6:15 p.m.71 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS0.00516EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/17 6:15 p.m.3 views

DEBIAN-CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS5.2AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/17 6:15 p.m.19 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.3AI score
SaveExploits0References2
OSV
OSV
added 2024/12/17 6:15 p.m.16 views

UBUNTU-CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS5.8AI score0.00516EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/17 12:00 a.m.11 views

Inferno Nettverk Dante 安全漏洞

Inferno Nettverk Dante is a free SOCKS server from Inferno Nettverk. A security vulnerability exists in Inferno Nettverk Dante versions 1.4.0 through 1.4.3 that stems from incorrect access control for some configurations...

9.1CVSS6.5AI score0.00516EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/17 12:00 a.m.111 views

CVE-2024-54662

CVE-2024-54662 affects Dante 1.4.0–1.4.3; an incorrect access control issue in sockd.conf configurations involving socksmethod could lead to high-severity impact on confidentiality and integrity (CVSS 9.1). The issue is fixed in Dante 1.4.4, with remediation recommended to upgrade to that version...

9.1CVSS6.7AI score0.00516EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/12/17 12:00 a.m.37 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS5.2AI score0.00516EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/12/17 12:00 a.m.11 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

7.2AI score0.00516EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/17 12:00 a.m.44 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

0.00516EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2024/12/17 12:00 a.m.3 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS7AI score0.00516EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.6 views

PT-2024-36397

Name of the Vulnerable Software and Affected Versions Dante versions 1.4.0 through 1.4.3 Description The issue is related to incorrect access control for some sockd.conf configurations involving the socksmethod. This problem affects certain settings and can lead to unauthorized access...

9.1CVSS6.6AI score0.00516EPSS
SaveExploits0References28
VulnCheck KEV
VulnCheck KEV
added 2023/10/11 12:00 a.m.10 views

VulnCheck KEV: CVE-2022-23748

Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code...

7.8CVSS7.5AI score0.08533EPSS
SaveExploits0References1
zdt
zdt
added 2023/07/15 12:00 a.m.188 views

Icinga Web 2.10 - Authenticated Remote Code Execution Exploit

!/usr/bin/env python3 Exploit Title: Icinga Web 2.10 - Authenticated Remote Code Execution Exploit Author: Dante CoronaAka. cxdxnt Software Link: https://github.com/Icinga/icingaweb2 Vendor Homepage: https://icinga.com/ Software Link: https://github.com/Icinga/icingaweb2 Version: 2.8.6, 2.9.6, 2....

8.8CVSS7.1AI score0.1467EPSS
SaveExploits5
Rows per page
Query Builder