21640 matches found
CVE-2024-40898
creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:30+00:00| seen| https://t.me/HackingInsights/6516 2024-07-18 13:27:11+00:00| seen| https://t.me/cvedetector/1148 2024-07-19 03:58:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8023 2024-07-20 15:31:46+00:00|...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
SUSE CVE-2024-31143
An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or witho...
CVE-2022-35640
IBM Sterling Partner Engagement Manager 6.2.2 could allow a local attacker to obtain sensitive information when a detailed technical error message is returned. IBM X-Force ID: 230933...
CVE-2024-39700
creationtimestamp| type| source ---|---|--- 2024-07-16 21:18:17+00:00| seen| https://t.me/cvedetector/989 2024-07-25 09:37:51+00:00| seen| https://t.me/HackingInsights/7313 2024-07-31 05:00:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8133...
CVE-2024-40919
In the Linux kernel, the following vulnerability has been resolved: bnxten: Adjust logging of firmware messages in case of released token in hwrmsend In case of token is released due to token-state == BNXTHWRMDEFERRED, released token set to NULL is used in log messages. This issue is expected to ...
CVE-2024-6457
creationtimestamp| type| source ---|---|--- 2024-07-16 13:45:51+00:00| seen| https://t.me/cvedetector/929 2024-07-18 10:13:01+00:00| seen| https://t.me/HackingInsights/6470...
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1973)
According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.13 does not escape control characters in log messages.CVE-2023-28486 Sudo before 1.9.13 does not escape control characters in...
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1946)
According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.13 does not escape control characters in log messages.CVE-2023-28486 Sudo before 1.9.13 does not escape control characters in...
IBM Sterling Partner Engagement Manager 安全漏洞
IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines IBM. An information disclosure vulnerability exists in IBM Sterling Partner Engagement Manager version 6.2.2, which can be exploited by a local attacker to gain access to sensitive...
Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages
A hacker group called “NullBulge” says it stole more than a terabyte of Disney’s internal Slack messages and files from nearly 10,000 channels in an apparent protest over AI-generated art...
CVE-2024-38491
creationtimestamp| type| source ---|---|--- 2024-07-15 16:50:50+00:00| seen| https://t.me/cvedetector/869...
IBM Datacap Navigator 安全漏洞
IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. An information disclosure vulnerability exists in IBM Datacap Navigator, which can be exploited by an attacker to obtain sensitive information when a detailed technical error message is returned in a brows...
The vulnerability of the Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting...
PT-2024-5141 · Ibm · Ibm Sterling Partner Engagement Manager
Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager version 6.2.2 Description: The issue is related to the mechanism of forming error reports in IBM Sterling Partner Engagement Manager, which could allow a local attacker to obtain sensitive information...
CVE-2023-39327
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal...
AZL-73323 CVE-2023-39327 affecting package openjpeg2 2.3.1-12
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal...
DEBIAN-CVE-2023-39327
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal...
