24975 matches found
SUSE CVE-2023-6779
An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...
SUSE CVE-2023-6780
An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...
CVE-2024-24571
creationtimestamp| type| source ---|---|--- 2024-02-01 00:21:35+00:00| seen| https://t.me/ctinow/177212 2024-02-07 21:17:10+00:00| seen| https://t.me/ctinow/180966 2024-02-22 21:21:46+00:00| seen| https://t.me/ctinow/191178...
[NetScaler] Multicast packets may cross members within LA channel on SDX with i40e NICs
On a Fortville NIC SDX platform with i40e driver. When LA channel is configured with 10G or 25G NICs and is assigned to a NetScaler VPX. The VPX may receive unexpected multicast packets that was sent by itself through another member of the LA channel. Such as VRRP control plane messages. The...
CVE-2023-47257: Improper Control of Generation of Code
ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages...
CVE-2024-0853
creationtimestamp| type| source ---|---|--- 2024-01-31 17:17:11+00:00| seen| https://t.me/ctinow/176897 2024-02-01 01:01:38+00:00| seen| https://t.me/ctinow/177232 2024-02-03 15:31:50+00:00| seen| https://t.me/ctinow/178586 2024-02-13 03:16:25+00:00| seen| https://t.me/ctinow/183579 2024-02-22...
BIT-LIFERAY-2022-25146
The Remote App module in Liferay Portal Liferay Portal v7.4.3.4 through v7.4.3.8 and Liferay DXP 7.4 before update 5 does not check if the origin of event messages it receives matches the origin of the Remote App, allowing attackers to exfiltrate the CSRF token via a crafted event message...
AZL-34737 CVE-2023-6780 affecting package glibc for versions less than 2.38-6
An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...
AZL-34736 CVE-2023-6779 affecting package glibc for versions less than 2.38-6
An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...
CVE-2023-6780
An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...
DEBIAN-CVE-2023-6780
An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
CVE-2019-8815
creationtimestamp| type| source ---|---|--- 2024-01-31 08:01:51+00:00| seen| https://t.me/ctinow/176533 2024-01-31 09:41:59+00:00| seen| https://t.me/ctinow/176594 2024-01-31 10:36:50+00:00| seen| https://t.me/ctinow/176630 2024-01-31 17:17:17+00:00| seen| https://t.me/ctinow/176901 2024-02-01...
UBUNTU-CVE-2023-6780
An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...
CVE-2024-23170
An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...
Key Boundary Confusion
wolfssl is vulnerable to Key Boundary Confusion attack. The vulnerability is due to wolfSSL failing to enforce boundaries between DTLS messages handled by different keys, allowing for the amalgamation of messages meant for different security contexts into a single record...
RHSA-2024:0617
creationtimestamp| type| source ---|---|--- 2024-01-30 17:16:16+00:00| seen| https://t.me/ctinow/176085...
CVE-2024-24565
creationtimestamp| type| source ---|---|--- 2024-01-30 15:47:22+00:00| published-proof-of-concept| https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96 2024-01-30 18:32:15+00:00| seen| https://t.me/ctinow/176163 2024-02-05 23:16:13+00:00| seen| https://t.me/ctinow/179580...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...