423 matches found
EUVD-1999-1258
Malware in sbrugna...
EUVD-2010-4456
Malware in sbrugna...
EUVD-2005-0148
Malware in sbrugna...
EUVD-2015-1370
Malware in sbrugna...
EUVD-2005-4865
Malware in sbrugna...
EUVD-2016-5628
Malware in sbrugna...
EUVD-2013-2449
Malware in sbrugna...
EUVD-2012-0371
Malware in sbrugna...
EUVD-2017-9474
Malware in sbrugna...
EUVD-2016-6084
Malware in sbrugna...
EUVD-2005-0195
Malware in sbrugna...
EUVD-2020-1357
Malware in sbrugna...
EUVD-2002-0707
Malware in sbrugna...
EUVD-2024-0479
Malicious code in bioql PyPI...
EUVD-2024-53001
Malicious code in bioql PyPI...
GO-2025-3972 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly
Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade d7y.io/dragonfly/v2/client/daemon/proxy ...
GHSA-C2FC-9Q9C-5486 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication
Impact The access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison...
CVE-2025-59350 Timing attacks against Proxy’s basic authentication are possible
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time...