EulerOS 2.0 SP8 : php (EulerOS-SA-2023-1332)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress 'quines' gzip files, resulting in an...

EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2023-1318)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to...

EulerOS 2.0 SP8 : device-mapper-multipath (EulerOS-SA-2023-1310)

According to the versions of the device-mapper-multipath packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2023-1345)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the...

X.400 address type confusion in X.509 `GeneralName`

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

Medium: curl

Issue Overview: A vulnerability was found in curl. This issue occurs due to an erroneous function. A malicious server could make curl within Network Security Services NSS get stuck in a never-ending busy loop when trying to retrieve that information. This flaw allows an Infinite Loop, affecting...

root.netz-wolf.de Cross Site Scripting vulnerability OBB-3178376

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3913 Rapid7 Nexpose Certificate Validation Issue

Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when downloading updates. This failure could allow an attacker in a privileged position on the network to provide their own HTTPS endpoint, or intercept communications to the...

CVE-2022-3913

CVE-2022-3913 affects Rapid7 Nexpose and InsightVM, versions 6.6.82–6.6.177, due to failure to validate the update server’s TLS certificate when downloading updates. This could allow a network‑adjacent attacker with some access along the path to supply their own HTTPS endpoint or intercept traffi...

We Don’t Just Patch – We Hack

We Don’t Just Patch – We Hack By Trellix · February 1, 2023 This blog was written by Douglas McKee If you have read any security advisories, technology news articles or even our very own Bug Report, you have continually been bombarded with the message to patch, patch, patch! Patching is critical ...

Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type (CVE-2021-38397)

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. This plugin only works with Tenable.ot. Please visit...

Delta Electronics DOPSoft

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for remote code execution. 3. TECHNICAL...

EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

Logic Flaw Vulnerability in Backend Management of E-House Real Estate System

Ltd. is a company whose business scope includes: Internet data services, network and information security software development, software and information technology services, software development, information technology consulting services, information processing and storage support services,...

CVE-2022-41023

CVE-2022-41023 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflow in the DetranCLI command parsing for vpn pptp advanced name (and related templates). The issue arises from unsafe handling of command parameters (e.g., WORD, DNS, MTU, MRU, MPPE, stateful), enablin...

CVE-2022-41022

CVE-2022-41022 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing, specifically in the template handling the no vpn l2tp advanced name ... options WORD command. A crafted network packet can trigger the overflow and lead ...

CVE-2022-41021

CVE-2022-41021 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing functionality, exploitable through crafted network packets that trigger the template: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) pas...

CVE-2022-41025

CVE-2022-41025 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The TALOS report details stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the template handling for commands like vpn pptp advanced name dns (yes|no) mtu mru mppe (on|off) stateful (o...

CVE-2022-41026

CVE-2022-41026 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Cisco CVE entry describes multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing for the template no vpn pptp advanced name (and related commands), enabling arbitrary command execution via craf...

CVE-2022-41019

CVE-2022-41019 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The vulnerability is a stack-based buffer overflow in the Det r a nCLI command parsing, triggered by the template handling: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) password (WORD|null). A specially crafted...