Lucene search
+L

635 matches found

Github Security Blog
Github Security Blog
•added 2024/03/18 5:21 p.m.•44 views

Bypassing Brute Force Protection via Application Crash and In-Memory Data Loss

Summary An attacker can exploit a chain of vulnerabilities, including a Denial of Service DoS flaw and in-memory data storage weakness, to effectively bypass the application's brute force login protection. This makes the application susceptible to brute force attacks, compromising the security of...

9.8CVSS7.1AI score0.00751EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2024/03/18 12:00 a.m.•13 views

Argo CD Security Vulnerability

Argo CD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g. configuration in the Git repository, automatically synchronizing and deploying...

7.5CVSS6.6AI score0.01176EPSS
SaveExploits1References7
GithubExploit
GithubExploit
•added 2024/03/15 12:03 p.m.•571 views

Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect

CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exp...

9.8CVSS10AI score0.99434EPSS
SaveExploits22
OpenVAS
OpenVAS
•added 2024/03/08 12:00 a.m.•39 views

Fedora: Security Advisory for frysk (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•27 views

[SECURITY] Fedora 40 Update: frysk-0.4-94.fc40

Frysk is an execution-analysis technology implemented using native Java and C++. It is aimed at providing developers and sysadmins with the ability to both examine and analyze running multi-host, multi-process, multi-threaded systems. Frysk allows the monitoring of running processes and threads, ...

8.8CVSS6.8AI score0.02578EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2024/02/29 12:00 a.m.•36 views

CentOS 9 : libnbd-1.12.4-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.4-3.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...

4.8CVSS6.3AI score0.00974EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/02/29 12:00 a.m.•30 views

CentOS 9 : libnbd-1.12.6-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.6-1.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...

4.8CVSS6.3AI score0.00974EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/02/29 12:00 a.m.•35 views

CentOS 9 : libnbd-1.12.5-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.5-1.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...

4.8CVSS6.3AI score0.00974EPSS
SaveExploits1References2
Fedora
Fedora
•added 2024/02/14 2:25 a.m.•32 views

[SECURITY] Fedora 39 Update: clamav-1.0.5-1.fc39

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

7.5CVSS7.4AI score0.84841EPSS
SaveExploits0
Fedora
Fedora
•added 2024/02/13 1:28 a.m.•32 views

[SECURITY] Fedora 38 Update: clamav-1.0.5-1.fc38

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

7.5CVSS7.4AI score0.84841EPSS
SaveExploits0
Kitploit
Kitploit
•added 2024/02/10 11:30 a.m.•68 views

SqliSniper - Advanced Time-based Blind SQL Injection Fuzzer For HTTP Headers

SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities using multi-threaded, ensuring speed and efficiency. Unlike other scanners,...

8.2AI score
SaveExploits0References1
Veracode
Veracode
•added 2024/01/19 10:58 a.m.•25 views

Heap Buffer Overflow

libaom.so is vulnerable to Heap Overflow. The vulnerability is due to improper input validation during resizing of frames, while performing multi-threaded encode. The attacker can perform a heap overflow & crash the application by exploiting this vulnerability...

9.8CVSS7.3AI score0.01175EPSS
SaveExploits1References7Affected Software1
RedhatCVE
RedhatCVE
•added 2023/12/28 5:30 a.m.•85 views

CVE-2023-6879

A heap-based buffer overflow vulnerability was found in AOM. When increasing the resolution of video frames during a multi-threaded encode, a heap overflow may occur in av1looprestorationdealloc within threadcommon.c, leading to a denial of service or unauthorized reading of memory. Mitigation...

9.8CVSS9.1AI score0.01175EPSS
SaveExploits1References5
OSV
OSV
•added 2023/12/27 11:15 p.m.•13 views

CVE-2023-6879

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

9.8CVSS9.6AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2023/12/27 11:15 p.m.•8 views

CVE-2023-6879

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

9.8CVSS6.5AI score0.01175EPSS
SaveExploits1References5
NVD
NVD
•added 2023/12/27 11:15 p.m.•35 views

CVE-2023-6879

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

9.8CVSS0.01175EPSS
SaveExploits1References4
OSV
OSV
•added 2023/12/27 11:15 p.m.•7 views

DEBIAN-CVE-2023-6879

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

9.8CVSS6.2AI score0.01175EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/27 11:15 p.m.•26 views

AZL-62423 CVE-2023-6879 affecting package libao 1.2.0-24

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

9.8CVSS6.5AI score0.01175EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/27 11:15 p.m.•34 views

Design/Logic Flaw

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

7.5CVSS7.3AI score0.01175EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2023/12/27 11:15 p.m.•11 views

UBUNTU-CVE-2023-6879

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

9.8CVSS5.8AI score0.01175EPSS
SaveExploits1References4
Rows per page
Query Builder