37 matches found
MAL-2026-5921 Malicious code in proto-bin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1994859460fe293cad87eadf5c704e5c717c71deaaf54842f5e29fce765f99d5 Package is advertised as a prototype utilities library pack/unpack/checksum but its exported pack function calls an internal fetch that downloads a...
uutils coreutils 安全漏洞
uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils. This vulnerability stems from the safe-traversal protection mechanism, which is limited to Linux targets. As a result, directory traversal attacks may be...
Remote-Local-Exploitation-Lab-
🔐 Remote & Local Exploitation Lab 📌 Objective Exploit a vu...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tgt (SUSE-SU-2025:02740-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02740-1 advisory. - CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework bsc1230360 Tenab...
SUSE-SU-2025:02740-1 Security update for tgt
This update for tgt fixes the following issues: - CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework bsc1230360...
SUSE-SU-2025:02591-1 Security update for tgt
This update for tgt fixes the following issues: - CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework bsc1230360...
CVE-2024-45751
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
D-Tale RCE
This exploit effectively serves as a bypass for CVE-2024-3408. An attacker can override global state to enable custom filters, which then facilitates remote code execution. Specifically, this vulnerability leverages the ability to manipulate global application settings to activate the...
Mageia: Security Advisory (MGASA-2024-0304)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0304 Updated tgt packages fix security vulnerability
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical. CVE-2024-45751...
Updated tgt packages fix security vulnerability
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical. CVE-2024-45751...
SUSE CVE-2024-45751
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
CVE-2024-45751
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
UBUNTU-CVE-2024-45751
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
CVE-2024-45751: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
CVE-2024-45751
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
CVE-2024-45751
tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...
Linux target framework 安全漏洞
tgt Linux target framework is a user-space SCSI target framework by the individual developer FUJITA Tomonori. It supports iSCSI and iSER transport protocols. A security vulnerability exists in versions of Linux target framework tgt prior to 1.0.93, which stems from the use of the rand function...
CVE-2024-45751
The tgt (Linux target framework) software before version 1.0.93 is vulnerable to a security flaw where it attempts to achieve entropy by calling rand() without proper seeding via srand() . This causes the PRNG seed to remain at a constant value of 1, resulting in an identical sequence of challeng...