shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...

Chef Manage Detection

Binary data chefmanagewebdetect.nbin...

Chef Infra Server Detection

Binary data chefinfraserverwebdetect.nbin...

Chef Infra Client Detection

Binary data chefinfraclientwebdetect.nbin...

VMware RabbitMQ Installed (Windows)

Binary data vmwarerabbitmqwininstalled.nbin...

NextChat / ChatGPT Next Web Detection

Binary data nextchatdetect.nbin...

Fedora 40 : doctl (2023-0355346550)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0355346550 advisory. Automatic update for doctl-1.102.0-3.fc40. Changelog Sun Dec 31 2023 Mikel Olasagasti Uranga - Update to 1.102.0 - Closes rhbz2255468 rhbz2255083 Tenable has...

NextChat < 2.11.3 SSRF

Binary data nextchatCVE-2023-49785.nbin...

RHEL 8 : Release of OpenShift Serverless Client kn 1.31.1 (RHSA-2024:0880)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0880 advisory. Red Hat OpenShift Serverless Client kn 1.31.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.31.1. The kn CLI is delivered a...

Xiaomi Router AX9000 from Xiaomi Technology LLC suffers from a binary vulnerability

Xiaomi Router AX9000 is the third generation of Xiaomi's flagship Wi-Fi6 product released on March 29, 2021- with support for WiFi6 Enhanced and a maximum theoretical rate of up to 3.5Gbps. Xiaomi Technology LLC Xiaomi Router AX9000 has a binary vulnerability that can be exploited by an attacker ...

SUSE CVE-2024-33600

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This...

Adobe Substance 3D Designer Installed (macOS)

Binary data adobesubstance3ddesignermacosinstalled.nbin...

Microsoft Azure Command-Line Interface (CLI) Extensions Installed (Windows)

Binary data azurecliextensionswindetect.nbin...

Progress Kemp Flowmon Web Interface Detection

Binary data progresskempflowmondetect.nbin...

CrushFTP < 10.7.1 / 11.x < 11.1.0 Sandbox Escape (CVE-2024-4040) (Direct Check)

Binary data crushftpcve-2024-4040.nbin...

CrushFTP Server Installed (Linux / Unix)

Binary data crushftpservernixinstalled.nbin...

Libreswan Installed (Linux / Unix)

Binary data libreswannixinstalled.nbin...

CrushFTP Server Installed (Windows)

Binary data crushftpserverwininstalled.nbin...

PT-2024-3321

Name of the Vulnerable Software and Affected Versions glibc versions 2.15 and later Description The Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, resulting in a null pointer dereference when a client request is made. This flaw was introduced in...

PT-2024-3337

Name of the Vulnerable Software and Affected Versions glibc versions 2.15 and later Description The issue is related to the Name Service Cache Daemon's nscd netgroup cache, which uses xmalloc or xrealloc functions. These functions may terminate the process due to a memory allocation failure,...