Nervos CKB Panic on malformed input

Impact CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages References https://github.com/BurntSushi/rust-snappy/issues/29...

CVE-2024-22901

creationtimestamp| type| source ---|---|--- 2024-02-02 03:22:02+00:00| seen| https://t.me/ctinow/177899 2024-02-05 13:40:05+00:00| published-proof-of-concept| https://t.me/truesecator/5374 2024-02-07 21:17:19+00:00| seen| https://t.me/ctinow/180973 2024-02-24 14:47:01+00:00| seen|...

CVE-2024-21764

creationtimestamp| type| source ---|---|--- 2024-02-02 01:31:13+00:00| seen| https://t.me/ctinow/177861 2024-02-02 08:36:46+00:00| seen| https://t.me/ctinow/177981...

CVE-2023-47257

ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages...

CVE-2023-47257

ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages...

Remote code execution

ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

SUSE CVE-2023-6779

An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...

SUSE CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

CVE-2024-24571

creationtimestamp| type| source ---|---|--- 2024-02-01 00:21:35+00:00| seen| https://t.me/ctinow/177212 2024-02-07 21:17:10+00:00| seen| https://t.me/ctinow/180966 2024-02-22 21:21:46+00:00| seen| https://t.me/ctinow/191178...

[NetScaler] Multicast packets may cross members within LA channel on SDX with i40e NICs

On a Fortville NIC SDX platform with i40e driver. When LA channel is configured with 10G or 25G NICs and is assigned to a NetScaler VPX. The VPX may receive unexpected multicast packets that was sent by itself through another member of the LA channel. Such as VRRP control plane messages. The...

CVE-2024-0853

creationtimestamp| type| source ---|---|--- 2024-01-31 17:17:11+00:00| seen| https://t.me/ctinow/176897 2024-02-01 01:01:38+00:00| seen| https://t.me/ctinow/177232 2024-02-03 15:31:50+00:00| seen| https://t.me/ctinow/178586 2024-02-13 03:16:25+00:00| seen| https://t.me/ctinow/183579 2024-02-22...

BIT-LIFERAY-2022-25146

The Remote App module in Liferay Portal Liferay Portal v7.4.3.4 through v7.4.3.8 and Liferay DXP 7.4 before update 5 does not check if the origin of event messages it receives matches the origin of the Remote App, allowing attackers to exfiltrate the CSRF token via a crafted event message...

AZL-34737 CVE-2023-6780 affecting package glibc for versions less than 2.38-6

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

AZL-34736 CVE-2023-6779 affecting package glibc for versions less than 2.38-6

An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...

DEBIAN-CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

CVE-2019-8815

creationtimestamp| type| source ---|---|--- 2024-01-31 08:01:51+00:00| seen| https://t.me/ctinow/176533 2024-01-31 09:41:59+00:00| seen| https://t.me/ctinow/176594 2024-01-31 10:36:50+00:00| seen| https://t.me/ctinow/176630 2024-01-31 17:17:17+00:00| seen| https://t.me/ctinow/176901 2024-02-01...

CVE-2024-23170

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...