OpenSSL: Excessive time spent checking DH q parameter value

A vulnerability was found in OpenSSL. This security issue occurs because the applications that use the DHcheck, DHcheckex, or EVPPKEYparamcheck functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an...

openssl: Excessive time spent checking DH keys and parameters

A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DHcheck, DHcheckex, or EVPPKEYparamcheck functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an...

openssl: Excessive time spent checking DH keys and parameters

A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DHcheck, DHcheckex, or EVPPKEYparamcheck functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an...

ALPINE-CVE-2023-6237

Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may...

AZL-47670 CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6

Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may...

CVE-2024-3515

creationtimestamp| type| source ---|---|--- 2024-04-25 04:34:35+00:00| seen| https://t.me/arpsyndicate/4838 2024-04-25 14:19:44+00:00| seen| https://t.me/arpsyndicate/4845...

[SECURITY] Fedora 40 Update: sssd-2.9.4-7.fc40

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

CVE-2024-21511

creationtimestamp| type| source ---|---|--- 2024-04-24 01:44:44+00:00| seen| https://t.me/arpsyndicate/4779 2024-04-24 07:33:08+00:00| seen| https://t.me/arpsyndicate/4780 2024-04-24 21:34:52+00:00| seen| https://t.me/arpsyndicate/4824...

CVE-2024-2961

creationtimestamp| type| source ---|---|--- 2024-04-23 05:44:41+00:00| seen| https://t.me/habrcomnews/27158 2024-04-24 14:54:06+00:00| exploited| Telegram/FCl-zFUhmS9UiC9aFZN8Wtg1m5J70RBJYj81-h3AognJmoR 2024-04-25 03:30:14+00:00| seen| https://t.me/theninjaway1337/1559 2024-05-20 06:56:40+00:00|...

PT-2024-4459 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V224.0 Update 5 Description: A vulnerability has been identified that involves an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker t...

CVE-2022-38028

creationtimestamp| type| source ---|---|--- 2024-04-22 23:31:43+00:00| exploited| https://t.me/ctinow/215987 2024-04-23 17:26:56+00:00| seen| https://t.me/ctinow/216074 2024-04-23 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-04-24 12:45:06+00:00| exploited|...

Siemens SIMATIC and SCALANCE Devices Improper Input Validation (CVE-2024-0727)

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates...

CVE-2022-34707

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...

CVE-2023-21748

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-04-12...

Amazon Linux 2 : flatpak (ALAS-2024-2518)

The version of flatpak installed on the remote host is prior to 1.0.9-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2518 advisory. Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properl...

PT-2024-27765 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is related to a Cross-Site Request Forgery vulnerability, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged use...

Arbitrary Code Execution

transformers is vulnerable to Arbitrary Code Execution. This vulnerability is due to the deserialization of untrusted data within the loadrepocheckpoint function in the TFPreTrainedModel class, where attackers can exploit the use of pickle.load on data from potentially untrusted sources to execut...

CVE-2024-21509

creationtimestamp| type| source ---|---|--- 2024-04-12 08:13:58+00:00| seen| https://t.me/arpsyndicate/4561 2024-04-13 13:13:39+00:00| seen| https://t.me/arpsyndicate/4658...

CVE-2024-2201

creationtimestamp| type| source ---|---|--- 2024-04-11 10:54:16+00:00| published-proof-of-concept| https://t.me/itsecnews/4303 2024-04-11 16:46:05+00:00| published-proof-of-concept| https://t.me/truesecator/5627 2024-12-19 20:32:25+00:00| seen|...

CVE-2024-26230

creationtimestamp| type| source ---|---|--- 2024-04-11 07:45:50+00:00| seen| https://t.me/arpsyndicate/4471 2024-04-15 10:58:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10334 2024-08-28 16:33:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8398...