CVE-2024-3400-Checker

Palo 漏洞检查 - CVE-2024-3400 概述 此脚本旨在检查 Palo 系统中是否存在受感染的迹象，特别针对标识为 CVE-2024-3400 的漏洞。它会搜索技术支持包中的 gz 或 .tgz 归档文件，查找可能表明安全入侵的特定日志条目。 先决条件 Python 3.x 访问包含 Palo 日志的 .tar.gz 文件。 使用方法 1. 确保你有一个包含相关 Palo 日志的 .tar.gz 技术支持文件。 2. 修改脚本中的 filepath 变量，指向你的 .tar.gz 文件。 3. 可选 - 更新 searchterms 列表，加入指示 CVE-2024-3400...

CVE-2022-48310

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90...

Sophos Connect 安全漏洞

Sophos Connect is a VPN client from Sophos UK. A security vulnerability exists in Sophos Connect version 2.2.90 and prior versions, which stems from an information disclosure vulnerability in the technical support archive. An attacker could exploit the vulnerability to obtain sensitive key materi...

DEBIAN-CVE-2014-4200

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive...