CVE-2024-8751

creationtimestamp| type| source ---|---|--- 2024-09-13 00:49:14+00:00| seen| https://t.me/cvedetector/5530 2024-09-13 08:39:50+00:00| seen| https://t.me/HackerArsenal/352...

The vulnerability of the Zabbix universal monitoring system arises from the improper neutralization of special elements used in the command line. This allows a hacker to execute additional AT commands on the modem.

The vulnerability of the Zabbix universal monitoring system lies in the execution of test SMS messages, by providing a specially created phone number, and executing additional AT commands on the modem. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute addition...

The vulnerability of the ansible-connection module in the Ansible Configuration Management system, related to the disclosure of information in error messages, allows a perpetrator to gain access to confidential data.

The vulnerability of the ansible-connection module in the Ansible Configuration Management system, including Ansible Core, Ansible Base, is related to the disclosure of information in error messages. Exploiting this vulnerability can allow attackers to access confidential data...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab CE/EE versions prior to 17.0 to...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2024-2374)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-29981 · Espressif · Esp-Now

Name of the Vulnerable Software and Affected Versions: ESP-NOW Component affected versions not specified Description: The ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type...

ESP-NOW 缓冲区错误漏洞

ESP-NOW is a Wi-Fi communication protocol open-sourced by Espressif Systems. A buffer error vulnerability exists in ESP-NOW versions 2.5.1 and earlier, which stems from a failure to check the addrsnum field when implementing ESP-NOW group type messages, which could lead to memory corruption relat...

Shim: out-of-bounds read printing error messages

...

CVE-2024-23184

Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...

CVE-2024-23184

CVE-2024-23184 affects the Dovecot IMAP/POP3 server. The root issue is that parsing a large number of email address headers (From, To, Cc, Bcc, etc.) is highly CPU-intensive, leading to potential denial of service when attackers send crafted messages that trigger resource exhaustion. The availabl...

Open-Xchange Dovecot 安全漏洞

Open-Xchange Dovecot is an open source mail server from the German company Open-Xchange. A security vulnerability exists in Open-Xchange Dovecot that stems from parsing messages with very large headers that can lead to resource exhaustion...

Open-Xchange Dovecot 安全漏洞

Open-Xchange Dovecot is an open source mail server from the German company Open-Xchange. A security vulnerability exists in Open-Xchange Dovecot that originates from an external attacker who can send specially crafted messages to consume target system resources and cause an interruption...

PT-2024-39108 · Unknown · Erjemin Roll Cms

Name of the Vulnerable Software and Affected Versions: erjemin roll cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9 Description: A vulnerability was found in erjemin roll cms, which has been classified as problematic. This affects an unknown part of the file roll cms/roll cms/views.py. The...

CVE-2024-6010

creationtimestamp| type| source ---|---|--- 2024-09-07 15:09:49+00:00| seen| https://t.me/cvedetector/5020 2024-09-07 16:30:38+00:00| seen| https://t.me/HackerArsenal/293...

AZL-78970 CVE-2024-34156 affecting package golang 1.25.7-1

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...

DEBIAN-CVE-2024-34156

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...

GO-2024-3121 Interchain Security: The signers of ICS messages do not need to match the provider address in github.com/cosmos/interchain-security

Interchain Security: The signers of ICS messages do not need to match the provider address in github.com/cosmos/interchain-security...

CVE-2024-40865

creationtimestamp| type| source ---|---|--- 2024-09-06 04:54:18+00:00| seen| https://t.me/cvedetector/4946 2024-09-13 18:29:07+00:00| seen| https://t.me/KomunitiSiber/2570 2024-09-13 19:23:53+00:00| seen| Telegram/cdYpAseYrjXq5ASkVOiGft8peHdveFN19-uQtoIurTW9A 2024-09-13 19:23:54+00:00| seen|...

SUSE CVE-2024-34156

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...

Google Golang 安全漏洞

Google Golang is a static strongly typed, compiled language from Google.Go's syntax is close to that of C, but differs with respect to variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages that...