CVE-2022-41572

EyesOfNetwork (EON) up to version 5.3.11 is affected by CVE-2022-41572 where privilege escalation is possible because nmap can be run as root on the server, giving an attacker total control over the server. This is supported by Red Hat, NVD/NVD mirrors, OpenVAS listing, and other sources in the c...

CVE-2023-7256 affecting package nmap for versions less than 7.95-2

CVE-2023-7256 affecting package nmap for versions less than 7.95-2. A patched version of the package is available...

CVE-2024-8006 affecting package nmap for versions less than 7.95-2

CVE-2024-8006 affecting package nmap for versions less than 7.95-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: libpcap / nmap (CVE-2023-7256)

The version of libpcap / nmap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-7256 advisory. - In affected libpcap versions during the setup of a remote packet capture the internal function...

buildah security update

1.37.5-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.37.5-1 - update to https://github.com/containers/buildah/releases/tag/v1.37.5 - Resolves: RHEL-61857 2:1.37.4-2 - enable CNI - Resolves: RHEL-62107 2:1.37.4-1 - update to...

CVE-2023-7256 affecting package nmap for versions less than 7.93-3

CVE-2023-7256 affecting package nmap for versions less than 7.93-3. A patched version of the package is available...

CVE-2024-8006 affecting package nmap for versions less than 7.93-3

CVE-2024-8006 affecting package nmap for versions less than 7.93-3. A patched version of the package is available...

podman security update

5.2.2-1.0.2 - Bump epoch to ensure upgrade path Orabug: 37240207 5.2.2-1.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:5.2.2-1 - update to...

CBL Mariner 2.0 Security Update: libpcap / nmap (CVE-2024-8006)

The version of libpcap / nmap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8006 advisory. - Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remo...

Oracle Linux 9 : buildah (ELSA-2024-8563)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8563 advisory. 1.33.10-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.10-1 - update to the latest content of...

buildah security update

1.33.10-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.10-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/bd85c17 - Resolves: RHEL-61842...

buildah security update

1.33.9-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.9-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/4dc26b9 - Resolves: RHEL-61116 2:1.33.7-5 - rebuild to...

podman security update

4.9.4-13.0.1 - Fixes issue of podman execvp error while using podmansh Orabug: 36073625 - Improved saving remote build context to tarfile in Podman daemon Orabug: 36495655 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put shou...

Exploit for CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed...

reNgine 2.2.0 - Command Injection (Authenticated)

Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Date: 2024-09-29 Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3...

buildah security update

1.33.7-4.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.7-4 - rebuild for CVE-2024-24783 - Resolves: RHEL-28428...

AZL-48462 CVE-2024-8006 affecting package nmap for versions less than 7.93-3

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

AZL-48468 CVE-2023-7256 affecting package nmap for versions less than 7.93-3

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

AZL-48412 CVE-2024-8006 affecting package nmap for versions less than 7.95-2

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

AZL-48427 CVE-2023-7256 affecting package nmap for versions less than 7.95-2

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...