1212 matches found
Ivanti Avalanche - Remote Code Execution
An unauthenticated attacker could achieve the code execution through a RemoteControl server. id: CVE-2023-32563 info: name: Ivanti Avalanche - Remote Code Execution author: princechaddha severity: critical description: An unauthenticated attacker could achieve the code execution through a...
Ivanti Avalanche SmartDeviceServer - XML External Entity
XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. id: CVE-2024-38653 info: name: Ivanti Avalanche SmartDeviceServer - XML External Entity author: DhiyaneshDK severity: high description: | XXE in SmartDeviceServer in...
CVE-2023-32560
CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...
CVE-2023-41474
IVANTI AVALANCHE - PATH TRAVERSAL A new vulnerability has been found on Ivanti Avalanche. Tested on Avalanche Server v6.3.4.153 and identified as CVE-2023-41474. It’s a limited unauthenticated path traversal vulnerability, meaning that unauthorized attackers can access to any file under C:\PROGRA...
Ivanti Avalanche 6.3.2 - Local File Inclusion
Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. id: CVE-2021-30497 info: name: Ivanti Avalanche 6.3.2 - Local File Inclusion author: gy741 severity: high description: Ivanti Avalanch...
Malicious code in cors-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c243bfa0251c11e10ceee74a90cffa2189086cf647ad8dfe6d70ab5e3491a5 Package impersonates the widely-used cors Express middleware. lib/index.js copies the legitimate expressjs/cors source but adds an exported getPlugin...
Blockchain Transaction Simulation Phishing
Cryptocurrency users have increasingly become targets of phishing and scam attacks. To mitigate these threats, leading crypto wallets e.g., MetaMask have introduced transaction simulation, which previews a transaction's balance changes before on-chain execution. While effective against traditiona...
2026-07-tare-nightbox33-cloud
Tare contest details - Join Sherlock Discordhttps://discor...
Detecting Avalanche Effect in Adversarial Settings: Spotting the Encryption Loops in Ransomware
Spotting encryption loops in binary-only ransomware is a critical reverse engineering task. Since the existence of avalanche effect, an intrinsic characteristic of any secure encryption algorithms, is unavoidable during a victim data encryption attack, it is a very promising direction to spot...
Energy-Time Attack on Detectors in Quantum Key Distribution
Quantum key distribution is unbreakable in theory but may be hacked via imperfections in its hardware implementations. While many imperfections have been mitigated by countermeasures and advanced security proofs, several remain unsolved. One of these is a superlinear behaviour in single-photon...
Blockchain Communication Vulnerabilities
Blockchains are diverse in the way they handle communications between their nodes to disseminate information, mitigate attacks, and agree on the next block. While security vulnerabilities have been identified, they rely on an attack custom-made for a specific blockchain communication protocol. To...
CVE-2020-12442
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250...
@avalabs/avalanche-module (>=0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, <=4.1.1), @avalabs/bitcoin-module (>=0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, <=4.1.1) +20 more potentially affected by CVE-2025-64767 via @hpke/core (>=1.2.5, <=1.7.4)
@hpke/core NPM version =1.2.5, =0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, =0.0.0-CP-15094-atomic-tx-status-unkn-20260928135759, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197,...
EUVD-2020-4753
Malware in sbrugna...
EUVD-2018-20509
Malware in sbrugna...
EUVD-2018-20510
Malware in sbrugna...
EUVD-2020-4075
Malware in sbrugna...
EUVD-2024-25152
Malicious code in bioql PyPI...