1909 matches found
Siemens SIMATIC and SCALANCE Integer Overflow to Buffer Overflow (CVE-2025-0725)
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPTACCEPTENCODING option, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow. This plugin only works with Tenable.ot. Please...
[SECURITY] Fedora 43 Update: python-starlette-0.49.1-1.fc43
Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...
[SECURITY] Fedora 43 Update: suricata-7.0.12-1.fc43
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
Deserialization of Untrusted Data
Overview scapy is a Python-based interactive packet manipulation program and library. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loadsession process. An attacker can execute arbitrary code by convincing a user to load a malicious .pkl.gz session...
Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization
Summary An unsafe deserialization vulnerability in Scapy Internally, this triggers: python main.py SESSION = pickle.loadgzip.opensessionname, "rb" Since no validation or restriction is performed on the deserialized object, any code embedded via reduce will be executed immediately. This makes it...
[SECURITY] Fedora 42 Update: suricata-7.0.12-1.fc42
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
EUVD-2004-1346
Malware in sbrugna...
EUVD-2013-1780
Malware in sbrugna...
EUVD-2021-15487
Malware in sbrugna...
EUVD-2006-4323
Malware in sbrugna...
EUVD-2006-4322
Malware in sbrugna...
EUVD-2004-0602
Malware in sbrugna...
EUVD-2004-0968
Malware in sbrugna...
EUVD-2018-7208
Malware in sbrugna...
EUVD-2020-30163
Malware in sbrugna...
EUVD-2019-10462
Malware in sbrugna...
EUVD-2006-4325
Malware in sbrugna...
EUVD-2005-0759
Malware in sbrugna...