3183 matches found
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-50142)
In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a xfrm:Validate address prefix lengths in the xfrm selector. syzbot created an SA with...
CVE-2025-61430
Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed len differs from actual packet len, and due to a...
CVE-2025-61430
Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed len differs from actual packet len, and due to a...
CVE-2025-61430
JH Software Simple DNS Plus v9 is vulnerable to a vulnerability where improper handling of DNS over TCP allows a remote attacker with querying access to view DNS queries from other clients. The issue arises when the TCP length prefix is malformed (differing from actual packet length) or, due to a...
CVE-2025-61430
Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed len differs from actual packet len, and due to a...
PT-2025-43636
Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed len differs from actual packet len, and due to a...
CVE-2025-61430: Reliance on Reverse DNS Resolution for a Security-Critical Action
Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed len differs from actual packet len, and due to a...
CLSA-2025-1760711358 Fix CVE(s): CVE-2024-38474, CVE-2024-38475
SECURITY UPDATE: modrewrite proxy handler substitution and prefixstat vulnerabilities - debian/patches/CVE-2024-38474-38475-.patch: tighten up prefixstat and %3f handling, add better question mark tracking to avoid UnsafeAllow3F - CVE-2024-38474, CVE-2024-38475...
Reduced Password Entropy
typo3/cms-core is vulnerable to reduced password entropy. The vulnerability is due to a deterministic three-character prefix in the Password Generation component, which reduces randomness and allows an attacker to perform brute-force attacks more efficiently...
[SECURITY] Fedora 41 Update: python3.12-3.12.12-1.fc41
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
EUVD-2018-2501
Malware in sbrugna...
EUVD-2008-1918
Malware in sbrugna...
EUVD-2008-7145
Malware in sbrugna...
EUVD-2014-6270
Malware in sbrugna...
EUVD-2018-18692
Malware in sbrugna...
EUVD-2021-0698
Malware in sbrugna...
EUVD-2018-19366
Malware in sbrugna...
EUVD-2021-11845
Malware in sbrugna...