ROS-20240726-03

A vulnerability in the cjson and cmsgpack libraries of the Redis database management system DBMS is related to a buffer overflow in dynamic memory. buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code using a specially crafted Lua...

Photon OS 3.0: Lua PHSA-2023-3.0-0620

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0620. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20380...

Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware

The Computer Emergency Response Team of Ukraine CERT-UA has alerted of a spear-phishing campaign that targeted a scientific research institution in the country with malware known as HATVIBE and CHERRYSPY. The agency attributed the attack to a threat actor it tracks under the name UAC-0063, which...

OpenResty security vulnerabilities

OpenResty is an American OpenResty open source web application server based on Nginx and Lua. A security vulnerability exists in OpenResty, which stems from a hash denial of service vulnerability discovered in ljstrhash.c. The vulnerability is caused by a hash denial of service vulnerability...

Photon OS 4.0: Lua PHSA-2022-4.0-0168

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0168. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20323...

Photon OS 3.0: Lua PHSA-2019-3.0-0036

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20307...

Photon OS 4.0: Lua PHSA-2022-4.0-0173

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0173. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20318...

Photon OS 5.0: Lua PHSA-2023-5.0-0036

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20360...

Photon OS 4.0: Lua PHSA-2021-4.0-0130

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0130. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20347...

Photon OS 4.0: Lua PHSA-2022-4.0-0214

An update of the lua package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0214. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20332...

Ankitects Anki MPV script injection vulnerability

Talos Vulnerability Report TALOS-2024-1993 Ankitects Anki MPV script injection vulnerability July 22, 2024 CVE Number CVE-2024-26020 SUMMARY An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary...

PT-2025-1017

Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.4.2 Redis versions prior to 7.2.7 Redis versions prior to 6.2.17 Description The issue is related to a use-after-free vulnerability in Redis, which can be exploited by manipulating the garbage collector using a...

RHEL 8 : redis (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - redis: Code injection via Lua script execution environment CVE-2022-24735 - redis: heap overflow in the l...

CBL Mariner 2.0 Security Update: lua / ntopng / memcached (CVE-2021-45985)

The version of lua / ntopng / memcached installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-45985 advisory. - In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffe...

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal as demonstrated by getlocal(32^31).

...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840: Out-of-bounds Write

Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...

CVE-2024-39840

Versions of Factorio prior to 1.1.101 are vulnerable to an arbitrary code execution flaw. A crafted server can execute code on clients by providing a custom map that leverages specific Lua base module functions to execute bytecode and generate fake objects . To remediate this, users should update...