Lucene search
+L

39 matches found

ATTACKERKB
ATTACKERKB
added 2021/07/09 2:15 p.m.6 views

CVE-2021-32742

Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the Data.initbase32Encoded: function opens up the potential for exposing server memory and/or crashing the server Denial of Service for applications where untrusted data can end up in said function. Vapor does not currently...

9.1CVSS7AI score0.01199EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/07/09 12:0 a.m.9 views

vapor 代码问题漏洞

vapor is a Swift web development framework for individual developers. It can be used to develop high-performance web applications and supports iOS, OS X and Ubuntu systems. A code issue vulnerability exists in Vapor 4.47.1 and earlier versions, which stems from an error in the...

9.1CVSS8.2AI score0.01199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/07/09 12:0 a.m.7 views

PT-2021-19899 · Vapor · Vapor

Name of the Vulnerable Software and Affected Versions: Vapor versions 4.47.1 and prior Description: A bug in the Data.initbase32Encoded: function opens up the potential for exposing server memory and/or crashing the server Denial of Service for applications where untrusted data can end up in said...

9.1CVSS9.1AI score0.01199EPSS
SaveExploits0References7
Veracode
Veracode
added 2021/02/23 3:43 a.m.18 views

Timing Attack

Botan is vulnerable to timing attack. The vulnerability exists becasue constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS2.4AI score0.01976EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/02/22 2:15 a.m.1 views

DEBIAN-CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS8.5AI score0.01976EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/22 2:15 a.m.6 views

ALPINE-CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS7AI score0.01976EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/22 2:15 a.m.8 views

AZL-44961 CVE-2021-24115 affecting package botan2 2.14.0-2

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS7.4AI score0.01976EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/22 2:15 a.m.25 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS0.01976EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/22 2:15 a.m.19 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS6.8AI score
SaveExploits0References3
Prion
Prion
added 2021/02/22 2:15 a.m.13 views

Code injection

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

7.5CVSS9.4AI score0.01976EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/22 2:15 a.m.4 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS7.2AI score0.01976EPSS
SaveExploits0References4
OSV
OSV
added 2021/02/22 2:15 a.m.4 views

UBUNTU-CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS5.8AI score0.01976EPSS
SaveExploits0References5
CVE
CVE
added 2021/02/22 1:57 a.m.178 views

CVE-2021-24115

CVE-2021-24115 affects Botan prior to 2.17.3, where constant-time computations are not applied to certain decoding/encoding operations (base32, base58, base64, and hex). The vulnerability is in the crypto/encoding paths of Botan; impact is shown as high to critical in CVSS data (NVD: 7.5/3.1 v3.1...

9.8CVSS9.3AI score0.01976EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2021/02/22 1:57 a.m.59 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS9.6AI score0.01976EPSS
SaveExploits0
Kitploit
Kitploit
added 2020/10/26 11:30 a.m.181 views

Decoder++ - An Extensible Application For Penetration Testers And Software Developers To Decode/Encode Data Into Various Formats

An extensible application for penetration testers and software developers to decode/encode data into various formats. Setup Decoder++ can be either installed by using pip or by pulling the source from this repository: Install using pip pip3 install decoder-plus-plus Overview This section provides...

7.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2019/10/28 12:0 p.m.144 views

Cryptovenom - The Cryptography Swiss Army Knife

CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions, modern...

7.4AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.37 views

Fedora 28 : botan2 (2018-eaa7de17ae)

Update Botan2 to 2.7.0. Focus of this release is on performance and side channel hardening. - Address side channels in RSA key generation and ECDSA signing - Side channel hardening in many core algorithms modular exponentiation, ECC scalar multiply, Karatsuba multiplication, Barrett reduction, et...

5.9CVSS6AI score0.00887EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2018/07/12 12:0 a.m.37 views

Fedora 27 : botan2 (2018-98ab6b4e56)

Update Botan2 to 2.7.0. Focus of this release is on performance and side channel hardening. - Address side channels in RSA key generation and ECDSA signing - Side channel hardening in many core algorithms modular exponentiation, ECC scalar multiply, Karatsuba multiplication, Barrett reduction, et...

5.9CVSS6AI score0.00887EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2018/01/18 9:25 p.m.38 views

Vegile - Tool for Post exploitation Techniques in Linux

Vegile is a tool for Post exploitation Techniques in linux. Post Exploitation techniques will ensure that we maintain some level of access and can potentially lead to deeper footholds into our targets trusted network. How it works This tool will setting up your backdoor/rootkits when backdoor...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder