Lucene search
K

31237 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/23 12:0 a.m.2 views

F5 F5OS OS Detection

Binary data f5f5osdetect.nbin...

7AI score
Exploits0References1
NVD
NVD
added 2025/10/22 10:15 p.m.9 views

CVE-2025-62705

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...

5.7CVSS0.00299EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/22 9:47 p.m.3 views

EUVD-2025-35632

binaryvecio access memory out-of-bounds in binaryreadtoref and binarywritefromref...

6.5AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/10/22 9:47 p.m.11 views

binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...

6.9AI score
Exploits0References4Affected Software1
OSV
OSV
added 2025/10/22 9:47 p.m.10 views

GHSA-WWXP-HXH6-8GF8 binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...

8.6CVSS5.9AI score
Exploits0References4
NVD
NVD
added 2025/10/22 2:15 p.m.9 views

CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

0.00191EPSS
Exploits0References8
OSV
OSV
added 2025/10/22 2:15 p.m.8 views

DEBIAN-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

5.4AI score0.00191EPSS
Exploits0References1
OSV
OSV
added 2025/10/22 2:15 p.m.3 views

UBUNTU-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

5.9AI score0.00191EPSS
Exploits0References11
CVE
CVE
added 2025/10/22 1:23 p.m.19 views

CVE-2023-53715

CVE-2023-53715: In the Linux kernel wifi/brcmfmac cfg80211 path, the passphrase PMK is now passed in binary instead of hex to accommodate newer chips/firmware (e.g., BCM4387). The fix also clears the structure before setting the PMK to prevent leaking uninitialized stack contents to the device. O...

6AI score0.00191EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/10/22 12:12 p.m.7 views

CVE-2025-10639

The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code...

8.8CVSS8.2AI score0.00879EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/10/21 8:46 p.m.79 views

offsec

Offensive Security - Parcours en sécurité offensive !Difficu...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/21 3:40 p.m.3 views

Malicious code in mender-binary-delta (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acd5fd0dbb470fbbeb432988f6b61ba77541759f80b2ebd98150b3183ee8a2a Any computer that has this package installed or running should be considered...

7AI score
Exploits0References1
OSV
OSV
added 2025/10/21 3:40 p.m.3 views

MAL-2025-48568 Malicious code in mender-binary-delta (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acd5fd0dbb470fbbeb432988f6b61ba77541759f80b2ebd98150b3183ee8a2a Any computer that has this package installed or running should be considered...

7AI score
Exploits0References1
vulnersOsv
vulnersOsv
added 2025/10/21 12:0 p.m.8 views

mirror_sparse_matrix (>=0.1.1 <=0.1.17) potentially affected by unknown CVE via binary_vec_io (=0.1.12)

binaryvecio CARGO version =0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on binaryvecio and may be impacted: - mirrorsparsematrix =0.1.1, =0.1.17 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0109...

5.8AI score
Exploits0
RustSec
RustSec
added 2025/10/21 12:0 p.m.6 views

Out-of-bounds memory access in binary_read_to_ref and binary_write_from_ref

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...

6.9AI score
Exploits0Affected Software1
CNVD
CNVD
added 2025/10/21 12:0 a.m.2 views

WordPress Binary MLM Plan plugin elevation of privilege vulnerability

WordPress Binary MLM Plan plugin is a WordPress plugin designed for network marketing, mainly used to simplify the operational process of multi-level marketing MLM business. WordPress Binary MLM Plan plugin suffers from an elevation of privilege vulnerability that stems from the bmpuser role...

6.5CVSS7AI score0.0031EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/21 12:0 a.m.4 views

Delta Electronics DIAView WebHMI Detection

Binary data deltaelectronicsdiaviewwebhmidetect.nbin...

7AI score
Exploits0References1
Packet Storm
Packet Storm
added 2025/10/20 12:0 a.m.215 views

📄 Microsoft Windows Server Update Services Remote Code Execution

This is a proof of concept exploit for Microsoft Windows Server Update Services that leverages an unsafe deserialization of untrusted data in WSUS's AuthorizationCookie handling. This file demonstrates payload generation in C. using System; using System.IO; using System.Security.Cryptography; usi...

9.8CVSS6.9AI score0.99962EPSS
Exploits24
Tenable Nessus
Tenable Nessus
added 2025/10/20 12:0 a.m.4 views

Dassault Systemes DELMIA Apriso Installed (Windows)

Binary data dassaultsystemesdelmiaapriso.nbin...

7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/18 9:44 a.m.12 views

CVE-2025-11895

The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0. This is due to the bmpuserpayoutdetailofcurrentuser function selecting payout records solely by id without verifying ownership. This makes it possible for authenticate...

4.3CVSS5.9AI score0.00249EPSS
Exploits0References1
Rows per page
Query Builder