cosign 安全漏洞

cosign is a container signing, verification and storage in an OCI registry in the United States. A security vulnerability exists in versions prior to cosign 2.2.4 that stems from a remote image with a malicious attachment that could cause a denial of service on a host running Cosign...

CVE-2024-26176

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:48+00:00| seen| https://t.me/ctinow/206085 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-26177

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:44+00:00| seen| https://t.me/ctinow/206081 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-03 01:18:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1466...

CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential

Summary The revocation schema that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model, allowing a malicious holder of a revoked credential to generate a valid Non-Revocation Proof for that...

CVE-2023-36576

creationtimestamp| type| source ---|---|--- 2023-10-10 22:23:11+00:00| seen| https://t.me/cibsecurity/72027 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen|...

CVE-2023-38139

creationtimestamp| type| source ---|---|--- 2023-09-12 20:29:16+00:00| seen| https://t.me/cibsecurity/70325 2023-10-01 12:50:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9121 2024-04-18 16:45:00+00:00| seen|...

CVE-2023-38141

creationtimestamp| type| source ---|---|--- 2023-09-12 20:23:05+00:00| seen| https://t.me/cibsecurity/70298 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen|...

Malicious Package

Overview gd-company-updates is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Microsoft Windows Registry 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Registry. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Co...

CVE-2023-23421

creationtimestamp| type| source ---|---|--- 2023-03-14 19:23:18+00:00| seen| https://t.me/cibsecurity/59983 2023-04-13 18:02:40+00:00| published-proof-of-concept| Telegram/gyCoGHimPrHuJIO4PODdzGa-SbQUX3r8l5z0rakuXLR 2023-04-18 07:16:18+00:00| published-proof-of-concept|...

Malicious Package

Overview owa-sprite is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

NEC PC Settings Tool 安全漏洞

The NEC PC Settings Tool is a Nippon Electric NEC pre-installed settings tool for NEC-supplied computers. A security vulnerability exists in PC Settings Tool versions 10.x.x.x through 10.1.26.0 and 11.x.x.x through 11.0.22.0, which stems from missing authentication of critical functions. An...

KYC signature can be reused to regain KYC status

Lines of code Vulnerability details The function addKYCAddressViaSignature of the KYCRegistry contract allows a user to be granted a KYC status using a signature provided by Ondo. The function validates that the signer has the corresponding role for the requirement group and adds the user to the...

Malicious Package

Overview byte5432 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview devex-apollo-test is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview @commercialsalesandmarketing/contact-search is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Windows SeriousSAM HiveNightmare Registry Read Vulnerability

Binary data smbntserioussamcheck.nbin...

CVE-2020-13920

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...

Vulnerabilities fixed in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A remote malicious person could potentially exploit them to execute arbitrary code, to obtain elevated privileges obtain elevated privileges, to access sensitive data or to perform a denial-of-service attack. Below is a summary of the various...

Microsoft Windows Registry Denial of Service Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A denial of service vulnerability exists in Microsoft Windows Registry, which results from a program's failure to properly handle file system operations. An attacker could exploit this...