PT-2024-15241 · Openvpn +1 · Openvpn +1

Name of the Vulnerable Software and Affected Versions: OpenVPN versions prior to 2.6.9 Description: The OpenVPN GUI installer did not set proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path. This allows an attacker to...

OpenVPN Security Vulnerabilities

OpenVPN is a software package from US-based OpenVPN for creating encrypted tunnels for Virtual Private Networks VPNs, which uses the OpenSSL library to encrypt data and control information, and allows the created VPN to be authenticated using a public key, an electronic certificate, or a...

New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux hosts. "This particular campaign involves the use of a number of novel system weakening techniques against the data store itself," Cado securi...

Denial Of Service (DoS)

cbor2 is vulnerable to Denial of Service DoS. The vulnerability is due to missing exit code checks when computing a cbor2 hash, allowing an attacker to send a sufficiently long object during CBOR binary parsing, resulting in Denial of Service Dos...

Adobe FrameMaker Publishing Server Authentication Bypass (CVE-2024-20738)

Binary data adobefmpscve-2024-20738.nbin...

Adobe FrameMaker Publishing Server Detection

Binary data adobefmpsdetect.nbin...

PYSEC-2024-155

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR RFC 8949 serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a...

Design/Logic Flaw

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR RFC 8949 serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a...

CVE-2024-26134

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR RFC 8949 serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a...

CVE-2024-26134 CBOR2 decoder has potential buffer overflow

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR RFC 8949 serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a...

Amazon Systems Manager (SSM) Agent Installed (Linux)

Binary data amazonssmagentlinuxinstalled.nbin...

Amazon Systems Manager (SSM) Agent Installed (macOS)

Binary data amazonssmagentmacosinstalled.nbin...

NuGet Installed Packages (Windows)

Binary data nugetpackageenumerationwininstalled.nbin...

Safari < 13.1.2 Multiple Vulnerabilities

Binary data 701463.pasl...

Intel Extreme Tuning Utility Installed (Windows)

Binary data intelxtuwininstalled.nbin...

Hibernate Validator JAR Detection

Binary data hibernatevalidatorjardetection.nbin...

Intel Memory And Storage Tool Installed (Windows)

Binary data intelmaswininstalled.nbin...

Wix Toolset Installed (Windows)

Binary data wixwininstalled.nbin...

CVE-2023-24591

Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...