21698 matches found
Ubuntu: Security Advisory (USN-6633-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 / 9 : sudo (ELSA-2024-0811)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0811 advisory. - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21834 - CVE-2023-28486 sudo: Sudo does not escap...
PT-2024-14013 · Unknown · Contiki-Ng
Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.9 Description: The issue is caused by insufficient control of the lengths for DIO and DAO messages, particularly when they contain RPL sub-option headers, allowing an attacker to trigger out-of-bounds reads in t...
CVE-2024-1208
creationtimestamp| type| source ---|---|--- 2024-02-13 17:16:16+00:00| seen| https://t.me/ctinow/183960 2024-02-21 21:27:40+00:00| seen| https://t.me/arpsyndicate/3873 2024-02-25 14:46:21+00:00| seen| https://t.me/ctinow/192897...
Remote Monitoring & Management software used in phishing attacks
Remote Monitoring & Management RMM software, including popular tools like AnyDesk, Atera, and Splashtop, are invaluable for IT administrators today, streamlining tasks and ensuring network integrity from afar. However, these same tools have caught the eye of cybercriminals, who exploit them to...
Design/Logic Flaw
In Zimbra Collaboration ZCS 8.8.15 and 9.0, a closed account with 2FA and generated passwords can send e-mail messages when configured for Imap/smtp...
USN-6633-1 bind9 vulnerabilities
Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled parsing large DNS messages. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. CVE-2023-4408 Elias Heftrig, Haya Schulmann,...
CVE-2024-22445
creationtimestamp| type| source ---|---|--- 2024-02-13 09:31:45+00:00| seen| https://t.me/ctinow/183680 2024-03-04 07:41:23+00:00| seen| https://t.me/ctinow/199045...
SUSE CVE-2023-33850
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive...
CVE-2023-48432
An issue was discovered in Zimbra Collaboration ZCS 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can occur via JavaScript code in a link for a webmail redirection endpoint within en email message, e.g., if a victim clicks on that link within Zimbra webmail...
CVE-2024-23761
creationtimestamp| type| source ---|---|--- 2024-02-12 23:26:17+00:00| seen| https://t.me/ctinow/183492 2024-02-15 08:17:04+00:00| seen| https://t.me/ctinow/185325 2024-03-03 18:46:47+00:00| seen| https://t.me/ctinow/198866...
CVE-2024-24926
creationtimestamp| type| source ---|---|--- 2024-02-12 09:21:27+00:00| seen| https://t.me/ctinow/182960 2024-03-03 15:21:55+00:00| seen| https://t.me/ctinow/198777 2024-12-10 19:16:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9372 2024-12-11 15:01:35+00:00|...
CVE-2024-24930
creationtimestamp| type| source ---|---|--- 2024-02-12 07:21:49+00:00| seen| https://t.me/ctinow/182918 2024-03-03 14:46:48+00:00| seen| https://t.me/ctinow/198758...
CVE-2024-25741
creationtimestamp| type| source ---|---|--- 2024-02-12 04:26:18+00:00| seen| https://t.me/ctinow/182890 2024-02-15 06:26:38+00:00| seen| https://t.me/ctinow/185256...
CVE-2023-52429
creationtimestamp| type| source ---|---|--- 2024-02-12 04:26:15+00:00| seen| https://t.me/ctinow/182887 2024-02-15 06:26:47+00:00| seen| https://t.me/ctinow/185262 2024-03-03 14:46:42+00:00| seen| https://t.me/ctinow/198753...
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
Roundcube Webmail contains a persistent cross-site scripting XSS vulnerability that can lead to information disclosure via malicious link references in plain/text messages...
CVE-2024-25728
creationtimestamp| type| source ---|---|--- 2024-02-11 23:21:27+00:00| seen| https://t.me/ctinow/182857 2024-02-12 07:41:51+00:00| seen| Telegram/ZWbDdXJbODqOXI7ioTz6R1txYCT7Wa3RAaai6Qm794aB2E...
CVE-2024-25418
creationtimestamp| type| source ---|---|--- 2024-02-11 22:21:37+00:00| seen| https://t.me/ctinow/182855 2024-02-13 02:16:39+00:00| seen| https://t.me/ctinow/183554 2024-03-03 14:46:40+00:00| seen| https://t.me/ctinow/198751...
CVE-2024-23833
creationtimestamp| type| source ---|---|--- 2024-02-11 17:09:37+00:00| published-proof-of-concept| https://github.com/OpenRefine/OpenRefine/security/advisories/GHSA-6p92-qfqf-qwx4 2024-02-12 22:31:27+00:00| seen| https://t.me/ctinow/183437 2024-03-03 15:51:55+00:00| seen| https://t.me/ctinow/1987...