35711 matches found
Fedora 40 : dr_libs (2024-4b0288e34f)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4b0288e34f advisory. Update to 0^20241216git660795b - drflac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. - drmp3 0.6.40: Improve...
Fedora 41 : dr_libs (2024-72a8e64069)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-72a8e64069 advisory. Update to 0^20241216git660795b - drflac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. - drmp3 0.6.40: Improve...
CVE-2024-52906
creationtimestamp| type| source ---|---|--- 2024-12-25 14:55:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113714038274745724 2024-12-25 15:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atrc4ce2i 2024-12-25 17:09:26+00:00| seen|...
MAL-2024-12121 Malicious code in solidity-ibc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1a13b5de5d7c8bba62c5cfaa0a0c0b7044cfee854154b9fa3db8c6cbdaf1361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Path Traversal in Iptanus Wordpress_File_Upload
The script is only intended for authorization system detection...
Fedora: Security Advisory (FEDORA-2024-2a31fce8eb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2024-53161
In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of memctrlidx left-shifted 16 bits and OR-ed with DIMM index. With memctrlidx defined as 32-bits wide the left-shift...
CVE-2024-53151
creationtimestamp| type| source ---|---|--- 2024-12-24 11:49:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113707645594792662 2024-12-24 12:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2gdglf6i25 2024-12-24 14:24:32+00:00| seen|...
Dell Integrated Remote Access Controller (iDRAC) Hardware Detection
Binary data dellidracdevicedetect.nbin...
openSUSE Security Advisory (SUSE-SU-2024:4414-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-H4W2-HVCG-938J
creationtimestamp| type| source ---|---|--- 2024-12-23 17:28:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113703315103089292...
DEBIAN-CVE-2024-56326
Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the...
AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case
Cybersecurity researchers have found that it's possible to use large language models LLMs to generate new variants of malicious JavaScript code at scale in a manner that can better evade detection. "Although LLMs struggle to create malware from scratch, criminals can easily use them to rewrite or...
Debian: Security Advisory (DLA-4000-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2024-0396)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (openSUSE-SU-2024:0412-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2024-12086 Malicious code in dynamodb-data-mapper-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...
NTP Timeroast
Windows authenticates NTP requests by calculating the message digest using the NT hash followed by the first 48 bytes of the NTP message all fields preceding the key ID. An attacker can abuse this to recover hashes that can be cracked offline for machine and trust accounts. The attacker must know...
MAL-2024-12070 Malicious code in yb2bacceleratorstorefront-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...