3514 matches found
New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification
An ongoing ZLoader malware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft's digital signature verification to siphon user credentials and sensitive information. Israeli cybersecurity company Check Point Research, which has been trackin...
ROS-20211223-02
LibreOffice office suite vulnerability involves improper signature verification. Exploitation The vulnerability could allow an attacker acting remotely to manipulate a document so that the content was displayed as correctly signed, even though it was not the content associated with the the...
CVE-2020-16154
A flaw was found in the way the perl-App-cpanminus performed verification of package signatures stored in CHECKSUMS files. A malicious or compromised CPAN server used by a user, or a man-in-the-middle attacker, could use this flaw to bypass signature verification. Mitigation This issue can be...
CVE-2020-16156
A flaw was found in the way the perl-CPAN performed verification of package signatures stored in CHECKSUMS files. A malicious or compromised CPAN server used by a user, or a man-in-the-middle attacker, could use this flaw to bypass signature verification. Mitigation This issue can be mitigated by...
Signature verification failure in Tendermint
The root cause of this security vulnerability is in the Tendermint specification, and this advisory is a duplicate of https://github.com/tendermint/spec/security/advisories/GHSA-jqfc-687g-59pw. Impact Tendermint light clients running versions 0.34.0 to 0.34.8 are unable to detect and punish a new...
cpanminus data forgery issue vulnerability
cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN without performing any other actions. cpanminus version 2.28 has a security vulnerability that stems from packages allowing signature verification to be bypassed. No details of the vulnerability are currently...
cpanminus Data Forgery Issue Vulnerability (CNVD-2022-02759)
cpanminus is a script that is used to obtain, decompress, build and install modules from CPAN without performing any other operations. cpanminus is vulnerable to a data forgery issue, which can be exploited by attackers to bypass signature verification...
cpanminus signature verification vulnerability
cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN and does not perform any other operations. cpanminus suffers from a signature verification vulnerability that stems from packages not uniquely defining signature data. No detailed vulnerability details are currentl...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
Security feature bypass
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
DEBIAN-CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
Security feature bypass
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CVE-2020-16156 affects CPAN/CPAN.pm (notably CPAN 2.28 and its signature verification handling). The root cause is a bypass where an attacker can prepend or manipulate CHECKSUMS to bypass signature verification, enabling installation of tampered modules. Public documents confirm that the issue is...