13465 matches found
Junos OS PHPRC Environment Variable Manipulation RCE
This module exploits a PHP environment variable manipulation vulnerability affecting Juniper SRX firewalls and EX switches. The affected Juniper devices run FreeBSD and every FreeBSD process can access their stdin by opening /dev/fd/0. The exploit also makes use of two useful PHP features. The...
curl: use after free in SSH sha256 fingerprint check
A use-after-free flaw was found in the Curl package. This flaw risks inserting sensitive heap-based data into the error message that users might see or is otherwise leaked and revealed...
Security update 2023-08-15
...
PT-2023-7521 · Sierra Wireless · Aleos
Name of the Vulnerable Software and Affected Versions: ALEOS versions 4.16 and earlier Description: The issue is related to the use of hardcoded credentials in the debugging mode of the ALEOS operating system for Sierra Wireless MP70, RV50x, RV55, LX40, LX60 ES450, GX450 wireless routers. When...
PT-2023-35949 · Git +1 · Ntopng
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves the Flow::Flow and GenericHash::cleanup functions. No informati...
CVE-2023-40235
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...
CVE-2023-38245 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability
Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a...
CVE-2023-40235
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...
CVE-2023-40235
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...
PT-2023-27342 · Unknown · Archimate Archi
Name of the Vulnerable Software and Affected Versions: ArchiMate Archi versions prior to 5.1.0 Description: An NTLM Hash Disclosure issue was discovered. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access t...
CVE-2023-39969
CVE-2023-39969 affects uthenticode, a cross-platform library for partial Authenticode verification. In version 1.0.9, the library hashed the entire file instead of hashing sections by virtual address, violating the Authenticode spec and enabling an attacker to modify binary code without altering ...
uthenticode Data Forgery Issue Vulnerability
Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures. A data forgery issue vulnerability exists in uthenticode version 1.0.9, which stems from a vulnerability that allows an attacker to modify code in a binary file...
Undesired Behavior
Overview Affected versions of this package are vulnerable to Undesired Behavior. It contains a dependency on the SponsorLink package, which runs an obfuscated closed-source executable at buildtime. That executable spawns OS processes and performs network requests, including transferring a...
kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...
kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...
Description of the security update for Outlook 2016: August 8, 2023 (KB5002459)
None None...
Description of the security update for Office 2016: August 8, 2023 (KB5002465)
None None...
Description of the security update for Visio 2016: March 12, 2024 (KB5002565)
None None...
Description of the security update for Publisher 2013: August 8, 2023 (KB5002391)
Description of the security update for Publisher 2013: August 8, 2023 KB5002391 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply th...