35918 matches found
CVE-2023-32449: Improper Verification of Cryptographic Signature
Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...
D-Link D-View 8 Probe Server Detection
Binary data dlinkdview8probedetect.nbin...
Apple iOS < 16.5.1 Multiple Vulnerabilities (HT213814)
Binary data appleios1651check.nbin...
Exploit for Out-of-bounds Write in Fortinet Fortios
CVE-2022-42475 Background This is the exploit for the blog...
Apache Tomcat < 9.0.75 Vulnerability
Binary data 701438.pasl...
Apache Tomcat < 10.1.9 Vulnerability
Binary data 701439.pasl...
PT-2023-25182 · Sliver · Sliver
Name of the Vulnerable Software and Affected Versions: Sliver versions up to 1.5.39 Description: The cryptography implementation in Sliver allows a man-in-the-middle MitM attack with access to the corresponding implant binary to execute arbitrary code on implanted devices via intercepted and...
Apache Tomcat < 11.0.0-M6 Vulnerability
Binary data 701437.pasl...
CVE-2023-32274
Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information...
Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads
By Deeba Ahmed Threat actors have been taking over abandoned S3 buckets to launch malicious binaries, steal login credentials and more. This is a post from HackRead.com Read the original post: Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.19 (SUSE-SU-2023:2525-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2525-1 advisory. Update to go1.19.10 bsc1200441: - CVE-2023-29402: cmd/go: Fixed cgo code injection bsc1212073. -...
D-Link DIR-842V2 Router Arbitrary Command Execution
The vulnerability of D-Link DIR-842V2 router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by importing a specially created binary file...
VMware Aria Operations For Networks Web Interface Detection
Binary data vmwareariaoperationsfornetworkswebdetect.nbin...
Liferay Portal Installed (Unix / Linux)
Binary data liferaydetection.nbin...
Zyxel Router Detection - Get Basic Information
Binary data zyxelrouterdetectgetbasicinfo.nbin...
CVE-2023-29403
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...
Design/Logic Flaw
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...
CVE-2023-29403
CVE-2023-29403 describes a Go runtime issue on Unix where setuid/setgid binaries are not treated specially, enabling elevated-privilege file I/O and potential leakage of register contents when processes panic or terminate. Connected advisories (Astra Linux, Mariner/ALAS, Amazon Linux advisories) ...
CVE-2023-29403
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...