13626 matches found
[bootloader] A bytecode hash without the bytecode (preimage) can be marked as known, breaking the prover
Lines of code Vulnerability details This is a report of a finding in bootloader.yul. While the file is out of scope of the contest, the sponsor stated that they would still accept findings in the file and would judge them separately from the contest. Impact A bytecode hash for which the bytecode...
The Risk of Adding an Incorrect Previous Block Hash Value in a Blockchain Network
Lines of code Vulnerability details Impact There is a risk of adding an incorrect previous block hash value to a block, either intentionally or unintentionally. If the previous block hash value is incorrect, it means that the data in the previous block has been tampered with, and the current bloc...
Outlook Vulnerability Exploited by Russian Hackers Since April 2022
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A vulnerability in Microsoft Outlook allowed an unknown Russian threat actor to gain access to a victims NTLM hash through a specially crafted email. To receive real-time threat advisories, please follow...
Exploit for Improper Input Validation in Microsoft
A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397...
Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure
Title: Microsoft SQL Server Password Hash Exposure Product: Database Manufacturer: Microsoft Affected Versions: 2012-2022 Risk Level: Medium CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: SQL Server is a popular database system, and database systems are a vital backbone in IT...
UBUNTU-CVE-2023-27598
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. The vulnerabilities allow a malicious person to perform execute attacks that can result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Spoofing Access to sensitive data Increased user...
Important: Red Hat Security Advisory: openssl security and bug fix update
An update for openssl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
openssl: NULL dereference during PKCS7 data verification
A NULL pointer vulnerability was found in OpenSSL, which can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not...
RUSTSEC-2023-0025 Gitoxide has renamed its crates.
All crates in the gitoxide project have been renamed from git- to gix-. The git- prefixed crates are no longer being updated. Switch to using gix-hash to continue receiving updates...
Gitoxide has renamed its crates.
All crates in the gitoxide project have been renamed from git- to gix-. The git- prefixed crates are no longer being updated. Switch to using gix-hash to continue receiving updates...
cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +44 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)
git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...
Description of the security update for SharePoint Enterprise Server 2016: March 14, 2023 (KB5002368)
None None...
Description of the security update for SharePoint Foundation 2013: March 14, 2023 (KB5002367)
Description of the security update for SharePoint Foundation 2013: March 14, 2023 KB5002367 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23395...
Description of the security update for Office 2013: March 14, 2023 (KB5002198)
Description of the security update for Office 2013: March 14, 2023 KB5002198 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23399. Note: To apply this...
Description of the security update for Outlook 2016: March 14, 2023 (KB5002254)
None None...
Description of the security update for Office Web Apps Server 2013: March 14, 2023 (KB5002362)
None None...
Description of the security update for Office Online Server: March 14, 2023 (KB5002356)
None None...
Description of the security update for Office 2016: March 14, 2023 (KB5002197)
None None...
Description of the security update for Outlook 2013: March 14, 2023 (KB5002265)
Description of the security update for Outlook 2013: March 14, 2023 KB5002265 Summary This security update resolves a Microsoft Outlook elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23397. Note: To apply th...