Homebrew 安全漏洞

Homebrew is a package manager in the Homebrew open source. A security vulnerability exists in Homebrew versions prior to 4.2.20, which stems from os/linux/elf.rb's use of ldd to load ELF files obtained from untrusted sources. An attacker can achieve code execution via an ELF file with a custom...

CVE-2024-42381

In Homebrew, the Linux-specific file os/linux/elf.rb in brew prior to 4.2.20 uses ldd to load ELF files obtained from untrusted sources, enabling code execution via an ELF file with a custom .interp section during an un-sandboxed binary relocation phase. The tested vulnerable version is 237d1e783...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-6922

creationtimestamp| type| source ---|---|--- 2024-07-26 17:11:51+00:00| seen| https://t.me/cvedetector/1687 2024-07-29 11:25:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/7773 2024-07-29 13:33:40+00:00| seen| https://t.me/CyberBulletin/197 2024-07-29 13:35:57+00:00| seen|...

CVE-2024-41473

creationtimestamp| type| source ---|---|--- 2024-07-26 01:16:48+00:00| seen| https://t.me/cvedetector/1655 2025-02-12 09:28:19+00:00| seen| https://infosec.exchange/users/shadowserver/statuses/113990205373134629 2025-02-12 09:29:27+00:00| seen|...

CVE-2024-6327

creationtimestamp| type| source ---|---|--- 2024-07-24 16:38:49+00:00| seen| https://t.me/cvedetector/1561 2024-07-25 22:54:34+00:00| seen| https://t.me/ctinow/220833 2024-07-26 07:53:10+00:00| seen| https://t.me/KomunitiSiber/2306 2024-07-26 07:59:22+00:00| seen|...

CVE-2024-5818

creationtimestamp| type| source ---|---|--- 2024-07-24 15:48:39+00:00| seen| https://t.me/cvedetector/1558 2024-07-24 16:05:52+00:00| seen| https://t.me/BlackhatOfficials/1185...

CVE-2024-6197

creationtimestamp| type| source ---|---|--- 2024-07-24 10:47:43+00:00| seen| https://t.me/cvedetector/1547 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2024-10-09 04:00:00+00:00| seen|...

httpd: Substitution encoding issue in mod_rewrite

A flaw was found in the modrewrite module of httpd. Due to a substitution encoding issue, specially crafted requests may allow an attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant only to be execut...

CVE-2024-7014

creationtimestamp| type| source ---|---|--- 2024-07-23 13:03:32+00:00| seen| https://t.me/cvedetector/1500 2025-03-05 12:18:42+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3ljmxlwvyl62n 2025-03-05 16:17:11+00:00| seen|...

httpd: Substitution encoding issue in mod_rewrite

A flaw was found in the modrewrite module of httpd. Due to a substitution encoding issue, specially crafted requests may allow an attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant only to be execut...

CVE-2024-38434

creationtimestamp| type| source ---|---|--- 2024-07-21 10:01:27+00:00| seen| https://t.me/cvedetector/1301 2024-08-09 09:38:40+00:00| published-proof-of-concept| https://t.me/itsecnews/4594 2025-02-11 15:30:37+00:00| seen| https://t.me/ViralCyber/10887...

CVE-2024-6637

creationtimestamp| type| source ---|---|--- 2024-07-20 11:26:25+00:00| seen| https://t.me/cvedetector/1247 2025-02-14 10:03:09+00:00| seen| Telegram/aosrxDBMi4fR18eMLtm3jvV4e48kSEoLAQZ9Qf8EppOzq9vF...

CVE-2024-6489

creationtimestamp| type| source ---|---|--- 2024-07-20 09:46:05+00:00| seen| https://t.me/cvedetector/1246 2025-02-06 02:42:28+00:00| seen| Telegram/m9wx2ElxP99wy2gatY2CsV2jKHTW6cSP78raDFyS12D2N9N...

CVE-2024-40347

creationtimestamp| type| source ---|---|--- 2024-07-20 07:15:33+00:00| seen| https://t.me/cvedetector/1243 2024-07-20 09:04:02+00:00| seen| https://t.me/Kelvinseccommunity/549...

CVE-2024-41107

creationtimestamp| type| source ---|---|--- 2024-07-19 13:42:10+00:00| seen| https://t.me/cvedetector/1213 2024-07-22 10:18:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/6891 2024-07-23 09:46:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8060 2024-07-23...

CVE-2024-35199

creationtimestamp| type| source ---|---|--- 2024-07-19 05:20:11+00:00| seen| https://t.me/cvedetector/1185 2026-01-19 11:35:26+00:00| seen| https://gist.github.com/konard/d776e828509d5f2e3644437ac5400628 2026-01-19 11:37:28+00:00| seen|...

CVE-2024-40764

creationtimestamp| type| source ---|---|--- 2024-07-18 10:56:47+00:00| seen| https://t.me/cvedetector/1143 2024-07-19 10:45:24+00:00| seen| https://t.me/HackingInsights/6628...

CVE-2024-20419

creationtimestamp| type| source ---|---|--- 2024-07-17 19:53:44+00:00| seen| https://t.me/cvedetector/1103 2024-07-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1335 2024-07-18 08:53:32+00:00| seen| https://t.me/KomunitiSiber/2265 2024-07-18 10:13:21+00:00|...