Lucene search
+L

10008 matches found

Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•3 views

Malware in down-load-available-zip-now-35816-laughter-lust-jih3q-fajkvi

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•5 views

Malware in down-load-available-zip-now-23630-non-stop-je-te-plie-en-deux-6jxm0-xjqkwj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•1 views

Malware in ava-ilable-down-load-mp3-today-2013-10071-pure-heroine-vldvc-oyqobe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•3 views

Malware in avail-able-albu-m-down-load-114925-rainier-fog-nuh7o-acneyh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•3 views

Malware in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•3 views

Malware in down-load-available-zip-now-6092-expensive-shit-dzpv2-hzbnea

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•3 views

Malware in ava-ilable-down-load-mp3-today-2017-64747-near-to-the-wild-heart-of-life-n5sic-lqeaui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2024/10/16 6:37 a.m.•17 views

firefox: thunderbird: Compromised content process can bypass site isolation

The Mozilla Foundation's Security Advisory: A compromised content process could allow for the arbitrary loading of cross-origin pages...

9.8CVSS7.4AI score0.00535EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•18 views

Apache Solr 安全漏洞

Apache Solr is the United States Apache Apache Foundation of a search server based on Lucene a full-text search engine. The product supports level search , vertical search , highlighting search results and so on. A code issue vulnerability exists in Apache Solr, which stems from the presence of a...

8.1CVSS7.1AI score0.00742EPSS
SaveExploits0References3
OSV
OSV
•added 2024/10/11 9:15 p.m.•15 views

DEBIAN-CVE-2024-48938

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process...

7.5CVSS5.3AI score0.00593EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/10/10 12:00 a.m.•18 views

Siemens Authentication Bypass Vulnerability in Various Products

SIMATIC Drive Controllers are designed for the automation of production machines, combining the functionality of SIMATIC S7-1500 CPUs and SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the pc-based version of the SIMATIC S7-1500 controller, including optional visualization and...

6.9CVSS7.8AI score0.00557EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/10/08 6:33 p.m.•30 views

HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS6.8AI score0.00649EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2024/10/08 6:33 p.m.•23 views

GHSA-5WPR-CJ9P-959R HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

6.9CVSS5.1AI score0.00649EPSS
SaveExploits0References5
NVD
NVD
•added 2024/10/08 5:15 p.m.•28 views

CVE-2024-9622

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS0.00649EPSS
SaveExploits0References4
OSV
OSV
•added 2024/10/08 5:15 p.m.•13 views

UBUNTU-CVE-2024-9622

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS7.1AI score0.00649EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/10/08 4:26 p.m.•17 views

CVE-2024-9622 Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS5.2AI score0.00649EPSS
SaveExploits0References4
CVE
CVE
•added 2024/10/08 4:26 p.m.•102 views

CVE-2024-9622

CVE-2024-9622 applies to the resteasy-netty4 library, where improper handling of HTTP requests containing ASCII control characters can trigger the Netty HttpObjectDecoder BAD_MESSAGE state. This causes subsequent legitimate requests on the same connection to be ignored, leading to client timeouts...

5.3CVSS5.2AI score0.00649EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/10/08 4:26 p.m.•43 views

CVE-2024-9622 Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS0.00649EPSS
SaveExploits0References4
OSV
OSV
•added 2024/10/08 4:26 p.m.•19 views

CVE-2024-9622 Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS6.7AI score
SaveExploits0References7
OSV
OSV
•added 2024/10/08 9:15 a.m.•15 views

CVE-2024-47195

A vulnerability has been identified in ModelSim All versions V2024.3, Questa All versions V2024.3. gdb.exe in affected applications allows a specific executable file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and...

7.3CVSS5.8AI score0.00151EPSS
SaveExploits0References1
Rows per page
Query Builder