Lucene search
+L

4973 matches found

NVD
NVD
added 2025/09/14 3:15 a.m.6 views

CVE-2025-10387

A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipulation of the argument machinename/computeruser/os/date/time/ip/location/systemid/password causes sql injection. The attack can be initiated...

8.8CVSS0.00414EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/09/14 3:2 a.m.5 views

CVE-2025-10387 codesiddhant Jasmin Ransomware handshake.php sql injection

A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipulation of the argument machinename/computeruser/os/date/time/ip/location/systemid/password causes sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.00414EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/09/14 3:2 a.m.22 views

CVE-2025-10387 codesiddhant Jasmin Ransomware handshake.php sql injection

A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipulation of the argument machinename/computeruser/os/date/time/ip/location/systemid/password causes sql injection. The attack can be initiated...

6.5CVSS0.00414EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/09/14 12:0 a.m.7 views

Jasmin The Ransomware SQL注入漏洞

Jasmin The Ransomware is a powerful ransomware security testing tool used by ReadTeams, a personal developer of Siddhant Gour. Jasmin The Ransomware 1.0.1 and earlier versions suffer from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter...

8.8CVSS7AI score0.00414EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/12 10:15 a.m.8 views

CVE-2025-7448

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle MitM attack...

8.6CVSS0.00176EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/12 9:11 a.m.3 views

CVE-2025-7448 Man in the middle (MitM) attack vulnerability in Wi-SUN library

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle MitM attack...

8.6CVSS6.5AI score0.00176EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/12 9:11 a.m.21 views

CVE-2025-7448 Man in the middle (MitM) attack vulnerability in Wi-SUN library

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle MitM attack...

8.6CVSS0.00176EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/12 9:11 a.m.23 views

CVE-2025-7448

CVE-2025-7448 affects Silicon Labs Wi-SUN Stack. The issue arises from unexpected 4‑Way Handshake packet receptions, which can yield predictable cryptographic keys and potentially enable a Man-in-the-Middle (MitM) attack. Reported by multiple sources, the vulnerability is tied to Wi-SUN Handshake...

8.6CVSS6.5AI score0.00176EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/12 12:0 a.m.7 views

Silicon Labs Wi-SUN Stack 安全漏洞

Silicon Labs Wi-SUN Stack is a communications stack from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Wi-SUN Stack that stems from the fact that accidental reception of a 4-Way Handshake packet may result in a predictable key, potentially triggering a man-in-the-middle attac...

8.6CVSS6.7AI score0.00176EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/12 12:0 a.m.13 views

PT-2025-37298

Name of the Vulnerable Software and Affected Versions: Wi-SUN affected versions not specified Description: The Wi-SUN protocol is susceptible to a flaw related to unexpected 4-Way Handshake packet receptions. This can result in predictable keys, potentially enabling a Man-in-the-Middle MitM attac...

8.6CVSS6.2AI score0.00176EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-10013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of servic...

7.8CVSS7.3AI score0.0191EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-9689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - processcertificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero...

7.5CVSS7.1AI score0.01479EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-30575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowin...

7.5CVSS7AI score0.00999EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/07 10:21 p.m.22 views

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS6.3AI score0.00427EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/09/05 10:41 p.m.5 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.5 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.2 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/05 10:15 p.m.71 views

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS0.00427EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/09/05 9:59 p.m.60 views

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS0.00427EPSS
SaveExploits0References7
OSV
OSV
added 2025/09/05 9:59 p.m.24 views

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS6.3AI score
SaveExploits0References9
Rows per page
Query Builder