Lucene search
+L

20334 matches found

Kitploit
Kitploit
added 2023/12/06 11:30 a.m.58 views

PassBreaker - Command-line Password Cracking Tool Developed In Python

PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features Wordlist-based password cracking Brute force password cracking Support for multiple hash...

7.6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2023/12/06 5:27 a.m.49 views

CVE-2023-6393

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

5.3CVSS6.9AI score0.00631EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/12/06 2:04 a.m.6 views

SUSE CVE-2023-49285

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...

8.6CVSS8.3AI score0.88818EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.10 views

The vulnerability of the CNCSoft-B software and DOPSoft software lies in the possibility of an operation being executed outside the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of CNCSoft-B and DOPSoft software lies in the execution of operations beyond the buffer limits in memory when processing DPA files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file or a specially created...

7.8CVSS8AI score0.0023EPSS
SaveExploits0References5Affected Software2
RedhatCVE
RedhatCVE
added 2023/12/05 12:40 p.m.46 views

CVE-2023-49285

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

7.5CVSS8.5AI score0.88818EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2023/12/05 12:40 p.m.55 views

CVE-2023-49093

A flaw was found in HTMLUnit. Fetching external resources may be possible for XSLT processors with the Feature for Secure Processing disabled FSP, allowing code injection and arbitrary code execution. HTMLUnit is vulnerable to this type of attack by default...

8.8CVSS7.7AI score0.02378EPSS
SaveExploits1References4
NVD
NVD
added 2023/12/05 3:15 a.m.33 views

CVE-2023-33087

Memory corruption in Core while processing RX intent request...

7.8CVSS0.00157EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/05 3:15 a.m.22 views

Memory corruption

Memory corruption when processing cmd parameters while parsing vdev...

4.3CVSS7.5AI score0.00159EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/05 3:15 a.m.26 views

Memory corruption

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size...

4.3CVSS7.6AI score0.00159EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/05 12:00 a.m.10 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from post-release reuse in DSP services...

7.8CVSS8AI score0.007EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/05 12:00 a.m.7 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Dec-2023 Release 1, which is an integer overflow vulnerability in...

7.8CVSS7.7AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/04 11:15 p.m.12 views

AZL-32072 CVE-2023-49285 affecting package squid 5.7-5

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...

7.5CVSS7.2AI score0.88818EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/04 11:15 p.m.6 views

ALPINE-CVE-2023-49285

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...

7.5CVSS6.9AI score0.88818EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/04 11:15 p.m.2 views

DEBIAN-CVE-2023-49285

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...

7.5CVSS7.7AI score0.88818EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.9 views

PT-2023-24183 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Firmware when it processes a FTMR frame. Recommendations: At the moment, there is no information about a newer...

7.5CVSS6.8AI score0.00471EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:00 a.m.14 views

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the use of memory after file processing for .avif formats. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

10CVSS7.6AI score0.0093EPSS
SaveExploits0References14Affected Software4
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.10 views

PT-2023-28550 · Unknown · Gpu Driver

Name of the Vulnerable Software and Affected Versions: GPU driver affected versions not specified Description: The issue is related to an incorrect bounds check in the GPU driver, which can lead to a possible out of bounds write. This could result in a local denial of service and requires System...

4.4CVSS4.5AI score0.00102EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:00 a.m.14 views

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the issue of operations going beyond the buffer boundaries in memory when processing .avif files. Exploiting this vulnerability can allow an attacker to...

10CVSS7.8AI score0.01296EPSS
SaveExploits0References15Affected Software4
Positive Technologies
Positive Technologies
added 2023/12/03 12:00 a.m.8 views

PT-2023-8404 · Htmlunit · Htmlunit

Name of the Vulnerable Software and Affected Versions: HtmlUnit versions prior to 3.9.0 Description: HtmlUnit is a GUI-less browser for Java programs that is vulnerable to Remote Code Execution RCE via XSTL when browsing an attacker's webpage. The reason for the vulnerability is that the FEATURE...

10CVSS9.3AI score0.02378EPSS
SaveExploits1References19
ATTACKERKB
ATTACKERKB
added 2023/12/01 11:15 a.m.7 views

CVE-2023-5427

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits3References3
Rows per page
Query Builder