Lucene search
+L

7372 matches found

Metasploit
Metasploit
added 2022/08/15 12:00 a.m.696 views

Delinea Thycotic Secret Server Dump

This module exports and decrypts Secret Server credentials to a CSV file; it is intended as a post-exploitation module for Windows hosts with Delinea/Thycotic Secret Server installed. Master Encryption Key MEK and associated IV values are decrypted from encryption.config using a static key baked...

5.3AI score
SaveExploits0
Code423n4
Code423n4
added 2022/08/15 12:00 a.m.12 views

Some ERC20 tokens don't return bool values

Lines of code Vulnerability details Impact VotingEscrow will not work for such tokens. Proof of Concept This issue is same as a previous contest. In the implementation of token transfer, the return value is checked after token transfer. But some tokens do not return bool values. After DM, I know...

6.8AI score
SaveExploits0
NVD
NVD
added 2022/08/10 8:15 p.m.40 views

CVE-2022-30629

Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption...

3.1CVSS0.0108EPSS
SaveExploits1References5
Prion
Prion
added 2022/08/10 8:15 p.m.26 views

Session fixation

Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption...

2.6CVSS6.9AI score0.0108EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:15 p.m.4 views

CVE-2022-30629

Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption...

3.1CVSS5.8AI score0.0108EPSS
SaveExploits1References8Affected Software1
UbuntuCve
UbuntuCve
added 2022/08/10 8:15 p.m.43 views

CVE-2022-30629

Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption...

3.1CVSS6.9AI score0.0108EPSS
SaveExploits1References7
Code423n4
Code423n4
added 2022/08/06 12:00 a.m.18 views

Divide before multiply may create unexpected values on interests

Lines of code Vulnerability details Divide before multiply may create unexpected values on interests Impact Solidity integer division might truncate. As a result, performing divide before multiply can sometimes create loss of precision. Details If for example we have an operation: 2/33 The expect...

6.8AI score
SaveExploits0
CNNVD
CNNVD
added 2022/08/05 12:00 a.m.14 views

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

9.8CVSS8.9AI score0.0124EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/05 12:00 a.m.13 views

PT-2022-16422 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow issue exists in the GetValue functionality. This can be triggered by a specially-crafted configuration value, allowing an attacker to modify the configuration and cause a...

9.8CVSS9.4AI score0.0124EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/08/05 12:00 a.m.12 views

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

9.8CVSS8.9AI score0.0124EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/05 12:00 a.m.11 views

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

9.8CVSS8.9AI score0.0124EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/26 12:00 a.m.11 views

CVE-2021-43959

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery SSRF vulnerability in the CSV importing feature of JSM Insight. When running in an environment...

5.7CVSS6.2AI score0.00684EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2022/07/25 12:00 a.m.8 views

WordPress plugin Exports and Reports 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS7.8AI score0.01486EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/22 12:00 a.m.10 views

Wasmtime 安全漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. A security vulnerability in Wasmtime's code generator, Cranelift, originating in the AArch64-based platform, whose conversion rules for constants do not take into account whether sign or...

7.5CVSS7.3AI score0.00809EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/21 10:34 p.m.77 views

GHSA-7F6X-JWH5-M9R4 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

5.9CVSS6.7AI score0.00809EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2022/07/21 1:50 p.m.69 views

CVE-2022-31169

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

7.5CVSS7.7AI score0.00809EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/07/21 12:00 a.m.41 views

Siemens SCALANCE X Switch Devices Use of Insufficiently Random Values (CVE-2022-26647)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

9.8CVSS7.7AI score0.01114EPSS
SaveExploits0References3
Veracode
Veracode
added 2022/07/20 4:10 a.m.40 views

Information Disclosure

bolt is vulnerable to information disclosure. The vulnerability exists in the startplan function in connection.rb due to submitting sensitive parameter values to the orchestrator service when running plans over the PCP transport which allows an attacker to gain access to sensitive information...

4.1CVSS4.7AI score0.00511EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/07/18 12:54 p.m.32 views

CVE-2022-30620 Cellinx NVT – IP PTZ Camera Privilege Escalation

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "isadmin", "showConfig". Administrative Privileges which allows changing various configuration in the camera...

8.2CVSS8.8AI score0.00512EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/07/18 9:20 a.m.21 views

Insecure Cryptography

packbackbooks/lti-1p3-tool uses an insecure cryptographic configuration. The vulnerability exists due to improper configuration of generating cookies and openid values which allows an attacker to predict the token value and forge the token...

7.5CVSS7.2AI score0.0043EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder