Lucene search
+L

2755 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•5 views

CVE-2022-29166: Improper Neutralization of Special Elements in Output Used by a Downstream Component

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain fro...

8.8CVSS7.5AI score0.01005EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•2 views

PT-2022-19424

Name of the Vulnerable Software and Affected Versions matrix-appservice-irc versions prior to 0.33.2 Description The issue allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. This is due to a vulnerability in the node-i...

8.8CVSS0.01005EPSS
SaveExploits0References14
OpenVAS
OpenVAS
•added 2022/04/11 12:00 a.m.•15 views

Fedora: Security Advisory for unrealircd (FEDORA-2022-f6d46280da)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/05 12:00 a.m.•13 views

Fedora: Security Advisory for seamonkey (FEDORA-2022-3f78aabf8c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/04/04 1:09 a.m.•22 views

[SECURITY] Fedora 34 Update: seamonkey-2.53.11.1-1.fc34

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2022/04/01 11:15 p.m.•41 views

CVE-2022-0425

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery SSRF attacks...

7.6CVSS7.1AI score0.00609EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/04/01 10:17 p.m.•51 views

CVE-2022-0425

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery SSRF attacks...

5.4CVSS7.7AI score0.00609EPSS
SaveExploits0References2
Mend
Mend
•added 2022/04/01 10:17 p.m.•1 views

CVE-2022-0425

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery SSRF attacks...

7.6CVSS0.00609EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/01 12:00 a.m.•2 views

CVE-2022-0425: Server-Side Request Forgery (SSRF)

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery SSRF attacks...

7.6CVSS7.2AI score0.00609EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/03/31 12:16 a.m.•25 views

[SECURITY] Fedora 36 Update: seamonkey-2.53.11.1-1.fc36

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/03/31 12:00 a.m.•15 views

Fedora: Security Advisory for unrealircd (FEDORA-2022-a9349c1299)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/03/31 12:00 a.m.•13 views

Fedora: Security Advisory for unrealircd (FEDORA-2022-47da296f2b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/03/30 1:30 a.m.•22 views

[SECURITY] Fedora 35 Update: unrealircd-6.0.2-1.fc35

UnrealIRCd is an Open Source IRC server based on the branch of IRCu called Dreamforge, formerly used by the DALnet IRC network. Since the beginning of development on UnrealIRCd in May of 1999, it has become a highly advanced IRCd with a strong focus on modularity, an advanced and highly...

0.7AI score
SaveExploits0
Fedora
Fedora
•added 2022/03/30 1:12 a.m.•23 views

[SECURITY] Fedora 34 Update: unrealircd-5.2.4-1.fc34

UnrealIRCd is an Open Source IRC server based on the branch of IRCu called Dreamforge, formerly used by the DALnet IRC network. Since the beginning of development on UnrealIRCd in May of 1999, it has become a highly advanced IRCd with a strong focus on modularity, an advanced and highly...

0.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2022/03/28 6:59 a.m.•330 views

Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability

Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system. The vulnerability relates to CVE-2022-0543, a Lua sandbox escape flaw in the open-source, in-memory, key-value data...

10CVSS8.2AI score0.99999EPSS
SaveExploits560
Fedora
Fedora
•added 2022/03/28 12:43 a.m.•27 views

[SECURITY] Fedora 35 Update: seamonkey-2.53.11.1-1.fc35

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/03/27 12:00 a.m.•19 views

Fedora: Security Advisory for unrealircd (FEDORA-2022-0bff4ccd3b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/03/26 3:58 p.m.•23 views

[SECURITY] Fedora 36 Update: unrealircd-6.0.2-1.fc36

UnrealIRCd is an Open Source IRC server based on the branch of IRCu called Dreamforge, formerly used by the DALnet IRC network. Since the beginning of development on UnrealIRCd in May of 1999, it has become a highly advanced IRCd with a strong focus on modularity, an advanced and highly...

0.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/03/21 12:00 a.m.•75 views

Siemens SIMATIC Industrial Products Operation On a Resource After Expiration or Release (CVE-2021-37185)

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...

7.5CVSS7.2AI score0.0206EPSS
SaveExploits0References3
OSV
OSV
•added 2022/03/18 3:01 p.m.•13 views

OPENSUSE-SU-2022:0083-1 Security update for weechat

This update for weechat fixes the following issues: update to 3.2.1: CVE-2021-40516: relay: fix crash when decoding a malformed websocket frame boo1190206 update to 3.2 main changes: use XDG directories by default config, data, cache, runtime add support of IRC SASL mechanisms SCRAM-SHA-1,...

7.5CVSS8.1AI score0.01594EPSS
SaveExploits0References3
Rows per page
Query Builder