91511 matches found
CVE-2025-44964
A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...
CVE-2025-44964
CVE-2025-44964 concerns BlueStacks, version 5.20, with a reported lack of SSL certificate validation. This defect enables potential man-in-the-middle attacks and exposure of sensitive information. The NVD/CVE entry lists a CVSS v3.1 base score of 3.9 (LOW) with adjacent attack vector, high comple...
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...
Security update for apache2
This update for apache2 fixes the following issues: CVE-2024-42516: Fixed HTTP response splitting. bsc1246477 CVE-2024-43204: Fixed a SSRF when modproxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. bsc1246305 CVE-2024-47252: Fixed insufficient...
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...
CVE-2025-40600
The CVE-2025-40600 affects SonicWall SonicOS SSL VPN interface, where an externally-controlled format string error allows remote, unauthenticated attackers to cause service disruption (DoS). The issue is tied to handling of format strings in SSL VPN, with a critical CVSS base score (9.8) and netw...
SonicWALL SonicOS SSLVPN 格式化字符串错误漏洞
SonicWALL SonicOS SSLVPN is a virtual private network for secure remote access from SonicWALL USA. A Formatting String Error vulnerability exists in SonicWALL SonicOS SSLVPN that originates from an externally controlled formatting string and could result in a service interruption...
PT-2025-31264 · Sonicwall · Sonicos
Name of the Vulnerable Software and Affected Versions: SonicWall versions prior to 7.3.0-7012 Description: A format string vulnerability exists in the SonicOS SSL VPN interface, allowing a remote, unauthenticated attacker to cause a denial-of-service DoS condition. The vulnerability is due to the...
Malicious Package
Overview plugin-basic-ssl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl
Debian OpenSSL Predictable PRNG - - - Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: + https://www.exploit-db.com/exploits/5622/ Perl3 + https://www.exploit-db.com/exploits/5720/ Python4 + https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool...
NewStart CGSL MAIN 7.02 : python-certifi Multiple Vulnerabilities (NS-SA-2025-0144)
The remote NewStart CGSL host, running version MAIN 7.02, has python-certifi packages installed that are affected by multiple vulnerabilities: - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts...
NewStart CGSL MAIN 7.02 : python3.11 Multiple Vulnerabilities (NS-SA-2025-0109)
The remote NewStart CGSL host, running version MAIN 7.02, has python3.11 packages installed that are affected by multiple vulnerabilities: - A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly,...
MAL-2025-6232 Malicious code in plugin-basic-ssl (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c91f97ac10fa598313b2e03c827655a79a9eb89adf780dbd0df721f49780a8 Any computer that has this package installed or running should be considered...
Malicious code in plugin-basic-ssl (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c91f97ac10fa598313b2e03c827655a79a9eb89adf780dbd0df721f49780a8 Any computer that has this package installed or running should be considered...
The vulnerability of the mod_ssl function in the Apache HTTP Server allows attackers to compromise the integrity of the protected information.
The vulnerability of the modssl function in the Apache HTTP Server is related to the lack of measures to neutralize special control elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information from a remote location...
The vulnerability of the mod_ssl function in the Apache HTTP Server web server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the modssl function in the Apache HTTP Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
SonicWall SMA100 SSL-VPN Affected By Multiple Vulnerabilities
1 CVE-2025-40596 - Pre-Authentication Stack-Based Buffer Overflow VulnerabilityA Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution. CVSS Score: 7.3 CVSS Vecto...