13644 matches found
The vulnerability of Siemens SIMATIC process control systemās API interface allows a hacker to obtain the password hash.
The vulnerability of Siemens SIMATIC process control system APIs is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to obtain the password hash...
CVE-2022-35820
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:13+00:00| seen| https://t.me/cibsecurity/47809...
CVE-2022-2726
creationtimestamp| type| source ---|---|--- 2022-08-09 12:24:39+00:00| seen| https://t.me/cibsecurity/47773...
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2015 Update 3: August 9, 2022 (KB5016316)
None None...
Description of the security update for Outlook 2013: August 9, 2022 (KB5001990)
Description of the security update for Outlook 2013: August 9, 2022 KB5001990 Summary This security update resolves a Microsoft Outlook denial of service vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-35742. Note: To apply this...
Description of the security update for Excel 2016: August 9, 2022 (KB5002232)
None None...
Description of the security update for Office Online Server: August 9, 2022 (KB5002228)
None None...
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2013 Update 5: August 9, 2022 (KB5016315)
None None...
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2012 Update 5: August 9, 2022 (KB5016314)
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2012 Update 5: August 9, 2022 KB5016314 Note: This security update applies to all Visual Studio 2012 Update 5 editions except Isolated and Integrated Shells, Build Tools, Remote Tools, and...
kernel security and bug fix update
4.18.0-372.19.1.0.16.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32...
BitTorrent Protocol
BitTorrent is a communication protocol for peer-to-peer file sharing P2P, which enables users to distribute data and electronic files over the Internet in a decentralized manner. This protection can be used to detect the BitTorrent Protocol handshake, and with the packet capture, allows to extrac...
Possible signature replay in updateTaskHash() and updateProjectHash() function
Lines of code Vulnerability details Impact In updateProjectHash function, the data encoded only hash and nonce value but not the projectAddress. In case builder had 2 or more projects, the signature that builder used in updateProjectHash can also be used in other projects by attackers. bytes memo...
Hash Collision Within The epochForHash Mapping
Lines of code Vulnerability details It is not possible for the administrator to transfer operatorship to a new set of Operators/Weights/Threshold that has been previously configured because a hash collision will occur within the epochForHash mapping. Proof-of-Concept Assuming that OLDKEYRETENTION...
CVE-2022-30285
In Quest KACE Systems Management Appliance SMA through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials...
CVE-2022-30285
In Quest KACE Systems Management Appliance SMA through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials...
CVE-2022-30285
In Quest KACE Systems Management Appliance SMA through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials...
Authentication flaw
In Quest KACE Systems Management Appliance SMA through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials...
CVE-2022-30285
CVE-2022-30285 affects Quest KACE Systems Management Appliance (SMA) up to version 12.0. The vulnerability arises from a hash collision in the authentication process, which may allow authentication with invalid credentials. Severity is high (CVSSv3.1: 9.8, network attack vector, no user interacti...
