21 matches found
Artemis
Artemis 概述 一个用于查找 APK 基础设施的工具。 由以下团队提供： HADESS 通过基础设施和软件提供进攻性网络安全服务，包括漏洞分析、场景攻击规划以及定制集成预防项目的实施。我们的活动围绕预防企业、工业及实验室网络威胁而组织。 安装 pip install -r requirements.txt python main.py 命令行选项 --help 显示帮助 --path APK 文件的必需路径 --manifest 显示清单信息 --infra 查找所有基础设施地址，包括 IP、域名，例如 --infra ip,domain --whoise 查询所有基础设施的...
Amazon Linux 2023 : openexr, openexr-devel, openexr-libs (ALAS2023-2026-1713)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1713 advisory. OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to...
CVE-2026-38429
The OpenCMS content management system (versions v20 and before ) is vulnerable to an XML External Entity (XXE) injection flaw. The issue exists in the Admin Import DB feature because the application performs insecure XML parsing on user-supplied .zip files that contain a manifest.xml file. An att...
CVE-2026-38429
OpenCMS v20 and before is vulnerable to XML External Entity XXE in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml...
CVE-2026-27709
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...
CVE-2026-27709
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...
EUVD-2026-8767
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...
PT-2026-22043
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...
NLnet Routinator 安全漏洞
NLnet Routinator is an RPKI Resource Public Key Infrastructure validator from the NLnet team written in the Rust language. A security vulnerability exists in NLnet Routinator version 0.14.0 and earlier, which stems from code that initially parses a manifest without checking the contents of the...
GO-2022-0360 Ambiguous OCI manifest parsing in github.com/containerd/containerd
Ambiguous OCI manifest parsing in github.com/containerd/containerd...
GO-2024-2914 Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker
Moby Docker Engine is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker...
SUSE CVE-2018-17983
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry...
CentOS 8 : container-tools:rhel8 (CESA-2022:7457)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7457 advisory. - golang: net/http/httputil: panic due to racy read of persistConn after handler panic CVE-2021-36221 - opencontainers: OCI manifest and index parsing...
Ambiguous OCI manifest parsing
Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header. Versions of containerd prior to 1.4.12 and 1.5.8 treat the Content-Type...
Denial Of Service (DoS)
mercurial is vulnerable to denial of service. The vulnerability exists due to an out of bounds read during parsing of a malformed manifest entry...
CVE-2018-17983
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry...
DEBIAN-CVE-2018-17983
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry...
CVE-2018-17983
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry...
