CVE-2024-23170

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...

Key Boundary Confusion

wolfssl is vulnerable to Key Boundary Confusion attack. The vulnerability is due to wolfSSL failing to enforce boundaries between DTLS messages handled by different keys, allowing for the amalgamation of messages meant for different security contexts into a single record...

RHSA-2024:0617

creationtimestamp| type| source ---|---|--- 2024-01-30 17:16:16+00:00| seen| https://t.me/ctinow/176085...

CVE-2024-24565

creationtimestamp| type| source ---|---|--- 2024-01-30 15:47:22+00:00| published-proof-of-concept| https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96 2024-01-30 18:32:15+00:00| seen| https://t.me/ctinow/176163 2024-02-05 23:16:13+00:00| seen| https://t.me/ctinow/179580...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

Design/Logic Flaw

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...

CVE-2024-22647

CVE-2024-22647 : SEO Panel 4.10.0 is vulnerable to user enumeration during authentication. The issue arises from differences in error messages that reveal whether a username exists, enabling brute-force attempts with valid usernames. Affected product: SEO Panel (version 4.10.0). Root cause: authe...

PT-2024-1610 · Glibc +1 · Glibc +1

Name of the Vulnerable Software and Affected Versions: glibc versions 2.37 and newer Description: The issue is related to an integer overflow in the vsyslog internal function of the glibc library, which is called by the syslog and vsyslog functions. This occurs when these functions are called wit...

CVE-2024-22647

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...

CVE-2024-22647

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...

CVE-2024-1021

creationtimestamp| type| source ---|---|--- 2024-01-29 23:31:10+00:00| seen| https://t.me/ctinow/175601 2024-02-05 23:16:07+00:00| seen| https://t.me/ctinow/179575 2024-02-21 13:36:47+00:00| seen| https://t.me/ctinow/189581 2024-02-27 20:08:53+00:00| seen| https://t.me/arpsyndicate/4091 2026-06-2...

CVE-2023-51842

creationtimestamp| type| source ---|---|--- 2024-01-29 21:21:36+00:00| seen| https://t.me/ctinow/175536 2024-02-06 21:16:51+00:00| seen| https://t.me/ctinow/180319 2024-02-21 18:46:45+00:00| seen| https://t.me/ctinow/189922...

RHSA-2020:0804

creationtimestamp| type| source ---|---|--- 2024-01-29 15:11:32+00:00| seen| https://t.me/ctinow/175295 2024-01-29 15:11:33+00:00| seen| https://t.me/ctinow/175296...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

USN-6611-1: Exim vulnerability

It was discovered that Exim incorrectly handled certain requests. A remote attacker could possibly use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism...

SE-elektronic GmbH E-DDC Resource Management Error Vulnerability

The SE-elektronic GmbH E-DDC is a freely configurable building controller from SE-elektronic GmbH, Germany. A resource management error vulnerability exists in SE-elektronic GmbH E-DDC 03.07.03 and earlier versions, which originates from a vulnerability that allows an attacker to interrupt the...

CVE-2023-48202

creationtimestamp| type| source ---|---|--- 2024-01-27 07:26:37+00:00| seen| https://t.me/ctinow/174657 2024-01-28 12:35:43+00:00| seen| https://t.me/arpsyndicate/3290 2024-02-01 08:16:40+00:00| seen| https://t.me/ctinow/177370 2024-02-21 08:06:52+00:00| seen| https://t.me/ctinow/189303...

CVE-2023-48201

creationtimestamp| type| source ---|---|--- 2024-01-27 07:26:36+00:00| seen| https://t.me/ctinow/174656 2024-01-28 11:08:39+00:00| seen| https://t.me/arpsyndicate/3277 2024-02-01 08:16:41+00:00| seen| https://t.me/ctinow/177371 2024-02-21 08:06:51+00:00| seen| https://t.me/ctinow/189302...

CVE-2024-0697

creationtimestamp| type| source ---|---|--- 2024-01-27 06:21:47+00:00| seen| https://t.me/ctinow/174644 2024-01-28 14:15:47+00:00| seen| https://t.me/arpsyndicate/3304 2024-02-20 00:31:04+00:00| seen| https://t.me/ctinow/187995...