mimipenguin

MimiPenguin 2.0 Una herramienta para extraer la contraseña de inicio de sesión del usuario actual de escritorio Linux. Adaptada de la idea detrás de la popular herramienta de Windows mimikatz. Se le asignó CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Dato curioso: aún no se ha corregido...

EUVD-2026-38604

Module: plugins/modules/keyringinfo.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native keyring GNOME Keyring, macOS Keychain, Windows Credential Manager and places it directly into result"passphrase" with no output suppression...

EUVD-2012-5979

Malware in sbrugna...

EUVD-2018-13324

Malware in sbrugna...

EUVD-2012-3423

Malware in sbrugna...

SUSE-SU-2025:03037-1 Security update for git

This update for git fixes the following issues: Updated to 2.43.7 jscPED-13447: - CVE-2025-27613: Fixed arbitrary writable file creation and truncation in Gitk bsc1245938 - CVE-2025-27614: Fixed arbitrary script execution via repo clonation in Gitk bsc1245939 - CVE-2025-46835: Fixed arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2018-19358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, ...

CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

gnome-keyring bug fix update

An update is available for gnome-keyring. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-keyring packages contain a daemon which manages passwords and...

Linux Distros Unpatched Vulnerability : CVE-2018-20781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose...

gnome-keyring bug fix update

An update is available for gnome-keyring. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-keyring packages contain a daemon which manages passwords and...

OPENSUSE-SU-2024:10560-1 gnome-keyring-3.20.0-3.1 on GA media

These are all security issues fixed in the gnome-keyring-3.20.0-3.1 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

RHEL 7 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

RHEL 6 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

RHEL 7 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

SUSE CVE-2012-3466

GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors...

SUSE CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

SUSE CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

new packages: gnome-keyring

An update is available for gnome-keyring. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...