DEBIAN-CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

Parse Nginx Config (Linux)

Binary data nginxnixparseconfig.nbin...

Enumerate PHP Composer Packages (Windows)

Binary data phpcomposerenumwin.nbin...

Enumerate PHP Composer Packages (Linux / Unix)

Binary data phpcomposerenumnix.nbin...

ZyXEL USG FLEX FTP Arbitrary Command Execution

The vulnerability of the File Transfer Protocol FTP implementation in microprogrammed network devices such as ZyXEL USG FLEX, USG FLEX 50W/USG20W-VPN, USG FLEX H, and ATP lies in the lack of measures to neutralize special elements used in operating system commands during the loading of binary...

Ruby Programming Language Installed (macOS)

Binary data rubymacosinstalled.nbin...

Roundcube Webmail Service Detection

Binary data roundcubewebmaildetect.nbin...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update

Red Hat OpenShift Container Platform release 4.15.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

[SECURITY] Fedora 39 Update: diffoscope-257-1.fc39

diffoscope will try to get to the bottom of what makes files or directories different. It will recursively unpack archives of many kinds and transform various binary formats into more human readable form to compare them. It can compare two tarballs, ISO images, or PDF just as easily. The...

Amazon Systems Manager (SSM) Agent Installed (Windows)

Binary data amazonssmagentwininstalled.nbin...

Fedora: Security Advisory for libxls (FEDORA-2024-8b67e47e43)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon CloudWatch Agent Installed (Windows)

Binary data amazoncloudwatchagentwininstalled.nbin...

Fortinet FortiSIEM Installed (Linux)

Binary data fortinetfortisiemnixinstalled.nbin...

Migo Targets Redis Servers for Cryptojacking Attacks

Summary: A new campaign has been uncovered that mines cryptocurrencies on Redis servers running Linux hosts by means of a malicious programme known as "Migo." Migo is distributed as a Golang ELF binary that can persist on Linux hosts and is obfuscated at compile time. The malware uses a variety o...

ConnectWise ScreenConnect Service Installed (Windows)

Binary data connectwisescreenconnectwininstalled.nbin...

ConnectWise ScreenConnect Service < 23.9.8 Authentication Bypass (Direct Check)

Binary data connectwisescreenconnect2398dc.nbin...

SolarWinds Access Rights Manager (ARM) Installed (Windows)

Binary data solarwindsarmwininstalled.nbin...

ConnectWise ScreenConnect HTTP Detection

Binary data screenconnecthttpdetect.nbin...

CVE-2023-7235

The OpenVPN GUI installer (versions prior to 2.6.9 ) fails to set proper access control restrictions on the installation directory when a non-standard installation path is utilized. This incorrect default permission (CWE-276) allows an attacker to replace binaries with arbitrary executables. Whil...