cve-2022-32223

CVE-2022-32223 데모 익스플로잇을 생성하기 위한 소스 파일 CVE-2022-32223: Node.js는 Windows 플랫폼의 특정 조건에서 실행 흐름 탈취: DLL 하이재킹에 취약합니다. 이 취약점은 피해자의 Windows 시스템에 다음과 같은 종속성이 존재할 때 악용될 수 있습니다. OpenSSL이 설치되어 있고 “C:\Program Files\Common Files\SSL\openssl.cnf”가 존재해야 합니다. 위 조건이 충족되면, node.exe는 현재 사용자 디렉토리에서 providers.dll을...

CVE-2026-41940-Security-Patch

CVE-2026-41940-Security-Patch CVE-2026-41940 취약점에 대한 비공식 임시 패치 조치입니다. 임시 방어에 사용할 수 있습니다. 조건이 허락된다면 가능한 한 빨리 공식 정식 버전으로 업그레이드하십시오. cPanel 보안 공지: https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026 이 취약점에 대한 자세한 정보는 이 웹사이트를...

CVE-2026-77131

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

CVE-2026-77131

CVE-2026-77131 affects the TYPO3 extension SYSSY – TYPO3 Monitoring & Security Checks (syssy). When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it, resulting in a cleartext transmission of sensitive data. Exploitation r...

EUVD-2022-53424

Malicious code in bioql PyPI...

EUVD-2022-33842

Malicious code in bioql PyPI...

CVE-2022-29505

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation...

LINE for Windows 安全漏洞

LINE for Windows is a Windows-based instant messaging application from Japanese company LINE. A security vulnerability exists in LINE prior to version 7.8, which stems from a build error in the openssl dependency, making LINE for Windows prior to 7.8 vulnerable to DLL injection that could lead to...

SUSE-SU-2022:0935-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: Update to 12.22.11, which adjusts dependencies for openssl sources to 1.1.1n. Addressing the following issue in openssl: - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877...

Vulnerabilities fixed in Node.js

Vulnerabilities have been fixed in Node.js. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure The vulnerability with attribute CVE-2020-1971 can only be exploited be exploited...

FreeBSD : Gitlab -- Multiple Vulnerabilities (570706ff-7ee0-11ea-bd0b-001b217b3468)

Gitlab reports : NuGet Package and File Disclosure through GitLab Workhorse Job Artifact Uploads and File Disclosure through GitLab Workhorse Incorrect membership following group removal Logging of Praefect tokens Update Rack dependency Update OpenSSL dependency C Tenable Network Security, Inc. T...

UBUNTU-CVE-2020-7042

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted only a malformed certificate may be accepted...

openSUSE Security Update : git (openSUSE-2020-123)

This update for git fixes the following issues : Security issues fixed : - CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice bsc1158787. - CVE-2019-19604: Fixed a recursive clone...