Tableau Server Web UI Detection

Binary data tableauserverwebdetect.nbin...

D-Link Routers RCE (CVE-2021-45382)

The remote D-Link router is affected by a vulnerability. A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L,...

AlmaLinux 9 : python3.9 (ALSA-2022:7323)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7323 advisory. - A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int...

python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int"text", a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16, and 32 are no...

Cisco Duo Installed (macOS)

Binary data macosciscoduoinstalled.nbin...

PT-2025-40731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the binfmt misc module related to a shift-out-of-bounds condition in the check special flags function. This condition was identified by UBSAN...

CVE-2022-42321

Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations e.g. for deleting a sub-tree of Xenstore nodes. With sufficiently deep nesting levels this can result in stack exhaustion on xenstored, leading to a crash of xenstored...

SUSE SLES15 / openSUSE 15 Security Update : podman (SUSE-SU-2022:3820-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3820-1 advisory. - CVE-2022-2989: Fixed possible information disclosure and modification bsc1202809. Tenable has extracted the preceding...

Mozilla Firefox: Multiple Vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

WABT code vulnerabilities

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm2c version 1.0.29, which stems from an interrupt in CWriter::Write...

WABT buffer error vulnerability

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

VMware NSX For vSphere (NSX-v) Web Interface Detection

Binary data vmwarensxforvspherewebdetect.nbin...

Google Chrome < 107.0.5304.87 Vulnerability

Binary data 701429.pasl...

CVE-2022-3171

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

CVE-2022-33206

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP reque...

Microsoft Azure Service Fabric Installed (Windows)

Binary data microsoftazureservicefabricinstalled.nbin...

Microsoft Azure Service Fabric Web Detection

Binary data microsoftazureservicefabricwebdetect.nbin...

Google Chrome < 107.0.5304.62 Multiple Vulnerabilities

Binary data 701428.pasl...

PT-2025-40151

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the load elf binary function within the Linux kernel's fs/binfmt elf component. This leak occurs when interp elf ex fails to allocate memory, leading to an...

This Week in Spring - October 25th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! When last we spoke, I was in Las Vegas, NV, for the JavaOne show. It was amazing! Im in sunny Singapore, then off to Malaysia and Thailand. Its the first time Ive been to any of these places since 2019! How good it is to be...