Lucene search
+L

134 matches found

Cvelist
Cvelist
•added 2024/07/03 12:00 a.m.•236 views

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

0.03862EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/07/03 12:00 a.m.•87 views

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

9.8CVSS6.2AI score0.03862EPSS
SaveExploits0
Mend
Mend
•added 2024/07/03 12:00 a.m.•6 views

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

9.8CVSS0.03862EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
•added 2024/07/03 12:00 a.m.•83 views

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

9.8CVSS7.5AI score0.03862EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2024/07/03 12:00 a.m.•18 views

znc -- remote code execution vulnerability

Mitre reports: In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

9.8CVSS8.2AI score0.03862EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2023/08/23 11:44 a.m.•70 views

Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead

Developers are not the only people who have adopted the agile methodology for their development processes. From 2023-06-15 to 2023-07-11, Permiso Security's p0 Labs team identified and tracked an attacker developing and deploying eight 8 incremental iterations of their credential harvesting malwa...

7.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:38 a.m.•11 views

SUSE CVE-2013-2274

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report...

6.5CVSS7.8AI score0.02912EPSS
SaveExploits0References4
OSV
OSV
•added 2022/12/30 9:15 p.m.•20 views

CVE-2022-46584

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%dvap%d.maclist parameter in the kickbanwifimacdeny sub415D7C function...

9.8CVSS5.8AI score0.00976EPSS
SaveExploits1References1
OSV
OSV
•added 2022/12/30 9:15 p.m.•14 views

CVE-2022-46586

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%dvap%d.maclist parameter in the kickbanwifimacallow sub415B00 function...

9.8CVSS5.8AI score0.00976EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/30 9:15 p.m.•31 views

Stack overflow

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%dvap%d.maclist parameter in the kickbanwifimacdeny sub415D7C function...

7.5CVSS9.6AI score0.00976EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/30 12:00 a.m.•11 views

CVE-2022-46584

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%dvap%d.maclist parameter in the kickbanwifimacdeny sub415D7C function...

7.8AI score0.00976EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32648

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.18 through 5.15.55 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32429

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32824

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...

5.8AI score
SaveExploits0References1
Prion
Prion
•added 2021/04/09 4:15 p.m.•30 views

Command injection

sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have been possible to remove users from oth...

5.5CVSS8AI score0.01081EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2021/04/09 3:45 p.m.•4 views

CVE-2021-21431

sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have been possible to remove users from oth...

8.1CVSS0.01081EPSS
SaveExploits0References8
OSV
OSV
•added 2021/04/09 3:42 p.m.•99 views

GHSA-23C7-6444-399M Improper Input Validation in sopel-plugins.channelmgnt

Impact On some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have been possible to remove users from other channels but due to the wonder that is IRC and following RfCs, We have ...

7.6CVSS8.3AI score0.01081EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2021/04/09 3:42 p.m.•71 views

Improper Input Validation in sopel-plugins.channelmgnt

Impact On some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have been possible to remove users from other channels but due to the wonder that is IRC and following RfCs, We have ...

8.1CVSS2.3AI score0.01081EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/09 12:00 a.m.•4 views

CVE-2021-21431: Improper Input Validation

sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have been possible to remove users from oth...

8.1CVSS5.8AI score0.01081EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2020/07/02 11:53 a.m.•17 views

kickinkombucha.com Improper Access Control vulnerability OBB-1213435

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
Rows per page
Query Builder