CVE-2021-46925

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smcsock A crash occurs when smccdctxhandler tries to access smcsock but smcrelease has already freed it. 4570.695099 BUG: unable to handle page fault for address: 000000002eae9e88...

Authentication Bypass

com.linecorp.armeria: armeria-saml is vulnerable to Authentication Bypass. The vulnerability is due to improper filtering of SAML messages, allowing attackers to craft malicious messages to bypass authentication functionality...

CVE-2021-46920

creationtimestamp| type| source ---|---|--- 2024-02-27 08:32:08+00:00| seen| https://t.me/ctinow/194105 2024-02-27 08:32:20+00:00| seen| https://t.me/ctinow/194111 2024-04-23 20:11:46+00:00| seen| https://t.me/arpsyndicate/4777...

CVE-2021-46919

creationtimestamp| type| source ---|---|--- 2024-02-27 08:32:07+00:00| seen| https://t.me/ctinow/194104 2024-02-27 08:32:16+00:00| seen| https://t.me/ctinow/194110 2024-02-27 19:41:39+00:00| seen| https://t.me/ctinow/194780...

CVE-2021-46918

creationtimestamp| type| source ---|---|--- 2024-02-27 08:32:06+00:00| seen| https://t.me/ctinow/194103 2024-02-27 08:32:15+00:00| seen| https://t.me/ctinow/194109 2024-02-27 19:11:58+00:00| seen| https://t.me/ctinow/194762...

CVE-2021-46910

creationtimestamp| type| source ---|---|--- 2024-02-27 08:21:32+00:00| seen| https://t.me/ctinow/194083 2024-02-27 08:21:44+00:00| seen| https://t.me/ctinow/194092 2024-02-27 21:51:49+00:00| seen| https://t.me/ctinow/194881...

CVE-2024-25166

creationtimestamp| type| source ---|---|--- 2024-02-27 02:21:49+00:00| seen| https://t.me/ctinow/193922 2024-02-27 02:26:36+00:00| seen| https://t.me/ctinow/193928...

CVE-2024-22544

creationtimestamp| type| source ---|---|--- 2024-02-27 02:21:47+00:00| seen| https://t.me/ctinow/193920 2024-02-27 02:26:33+00:00| seen| https://t.me/ctinow/193926...

CVE-2024-25247

creationtimestamp| type| source ---|---|--- 2024-02-27 00:26:46+00:00| seen| https://t.me/ctinow/193862 2024-02-27 00:36:55+00:00| seen| https://t.me/ctinow/193868...

CVE-2024-24528

creationtimestamp| type| source ---|---|--- 2024-02-26 20:31:52+00:00| seen| https://t.me/ctinow/193724 2024-02-26 20:31:57+00:00| seen| https://t.me/ctinow/193729...

GHSA-HX5Q-V6PJ-533R SAML authentication bypass due to missing validation on unsigned SAML messages

Impact When SAML is used as the authentication mechanism, Central Dogma accepts unsigned SAML messages assertions, logout requests, etc. as they are, rather than rejecting them by default. As a result, an attacker can forge a SAML message to authenticate themselves, despite the fact that such an...

GHSA-4M6J-23P2-8C54 Armeria SAML authentication bypass due to missing validation on unsigned SAML messages

Impact The SAML implementation provided by armeria-saml currently accepts unsigned SAML messages assertions, logout requests, etc. as they are, rather than rejecting them by default. As a result, an attacker can forge a SAML message to authenticate themselves, despite the fact that such an unsign...

CVE-2024-27087

creationtimestamp| type| source ---|---|--- 2024-02-26 18:26:42+00:00| seen| https://t.me/ctinow/193617 2024-02-26 18:32:19+00:00| seen| https://t.me/ctinow/193624 2024-03-14 10:51:58+00:00| seen| https://t.me/ctinow/207617...

CVE-2024-27455

creationtimestamp| type| source ---|---|--- 2024-02-26 17:47:18+00:00| seen| https://t.me/ctinow/193574 2024-03-14 08:21:50+00:00| seen| https://t.me/ctinow/207536...

CVE-2024-21825

creationtimestamp| type| source ---|---|--- 2024-02-26 17:42:39+00:00| seen| https://t.me/ctinow/193559 2024-03-14 09:51:15+00:00| seen| https://t.me/ctinow/207579...

CVE-2024-1878

creationtimestamp| type| source ---|---|--- 2024-02-26 17:42:32+00:00| seen| https://t.me/ctinow/193553 2024-02-29 10:26:14+00:00| seen| https://t.me/ctinow/196471...

CVE-2023-30996

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290...

CVE-2024-22371

creationtimestamp| type| source ---|---|--- 2024-02-26 13:02:12+00:00| seen| https://t.me/ctinow/193292 2024-03-14 03:21:37+00:00| seen| https://t.me/ctinow/207393...

CVE-2024-1735

A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later...

LibHTP 安全漏洞

LibHTP is a security-aware parser. The product is mainly used for HTTP protocols, among others. A denial of service vulnerability exists in LibHTP prior to version 0.5.46. The vulnerability stems from failure to properly process incoming error messages, which can be exploited by an attacker to...