110 matches found
CVE-2017-8570
Fuente: https://www.exploit-db.com/exploits/44263/ Uso: python packagercompositemoniker.py -s calc.sct -o example.rtf ¿Qué? Este repositorio contiene un exploit de prueba de concepto para CVE-2017-8570, también conocida como la vulnerabilidad "Composite Moniker". Esto demuestra el uso del truco d...
PySCTChecker
PySCTChecker Description This is a Quick and dirty Python script for checking if a domain properly implements Certificate Transparency. If so, it is possible to observe how Certificate Transparency is implemented on the server side. When a server implements Certificate Transparency, it must offer...
CVE-2017-8570
CVE-2017-8570Exp.py Referencia:https://github.com/rxwx/CVE-2017-8570 Cambios: Uso: root@kitploit: python2 CVE-2017-8570Exp.py -s write.sct -e write.exe -o write.rtf + RTF file written to: write.rtf...
CVE-2017-8570
¿Qué? Este repositorio contiene un exploit de Prueba de Concepto para CVE-2017-8570, también conocido como la vulnerabilidad "Composite Moniker". Esto demuestra el uso del truco de Packager.dll para dejar un archivo sct en el directorio %TEMP% y luego ejecutarlo mediante la primitiva que...
CVE-2017-8570
¿Qué? Este repositorio contiene un exploit de prueba de concepto para CVE-2017-8570, también conocida como la vulnerabilidad "Composite Moniker". Esto demuestra el uso del truco de Packager.dll para colocar un archivo sct en el directorio %TEMP% y luego ejecutarlo usando la primitiva que...
PT-2026-53821
DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...
gnutls security update
3.8.10-4 - Fix CVE-2026-33846 DTLS fragment reassembly, High, heap overwrite - Fix CVE-2026-42009 DTLS fragment reassembly, High, undefined behaviour - Fix CVE-2026-33845 DTLS fragment reassembly, High, heap overread - Fix CVE-2026-42010 PSK authentication, High, authentication bypass - Fix...
CVE-2025-26385: Improper Neutralization of Special Elements used in a Command
Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements used in a Command Command Injection Vulnerability . Successful exploitation of this vulnerability could allow remote SQL execution This issue affects Metasys: Application and Data Server ADS installed...
Security Bulletin:Vulnerability in gnuTLS affects IBM Netezza Appliance
Summary The gnuTLS package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVEs CVE-2025-6395, CVE-2025-32990, CVE-2025-32989, CVE-2025-32988 Vulnerability Details CVEID:CVE-2025-6395 DESCRIPTION: A NULL pointer dereference flaw was found in the GnuTLS softwa...
MiracleLinux 9 : gnutls-3.8.3-6.el9_6.2 (AXSA:2025-10868:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10868:03 advisory. gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension parsing CVE-2025-32989 gnutl...
Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2025-32989)
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...
gnutls security, bug fix, and enhancement update
An update is available for gnutls. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnutls packages provide the GNU Transport Layer Security GnuTLS library,...
RLSA-2025:16116 Moderate: gnutls security, bug fix, and enhancement update
The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension...
RockyLinux 9 : gnutls (RLSA-2025:16116)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16116 advisory. gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension parsing CVE-2025-32989 gnutls:...
EUVD-2004-1927
Malware in sbrugna...
EUVD-2004-1587
Malware in sbrugna...
EUVD-2019-8068
Malware in sbrugna...
EUVD-2016-9521
Malware in sbrugna...
gnutls: Vulnerability in GnuTLS SCT extension parsing
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...
Moderate: Red Hat Security Advisory: gnutls security, bug fix, and enhancement update
An update for gnutls is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...