32721 matches found
OPENSUSE-SU-2023:0031-1 Security update for upx
upx was updated to fix the following issues: - CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files boo1207122 Update to release 4.0.1 Fix crash when a linux/armeb LZMA-packed binary unpacks itself. Resolve 'CantPackException: bad ElfXXShdrs' with staticly-linked program...
Host Active Directory Configuration (MacOS/Unix)
Binary data hostadconfigunix.nbin...
PAM Database Host Auto Collection
Binary data pamdatabaseautocollect.nbin...
RHEL 7 : rh-nodejs10-nodejs (RHSA-2020:0597)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0597 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
RHEL 7 : rh-nodejs12-nodejs (RHSA-2020:0602)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0602 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
CVE-2023-24039
CVE-2023-24039 affects Common Desktop Environment 1.6, specifically the ParseColors function in libXm. A stack-based buffer overflow can be exploited by local, low-privilege users via the dtprintinfo setuid binary to escalate to root on Solaris 10. Several connected sources confirm the issue and ...
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases when using int("text") a system could take 50ms to parse an int string with 100000 digits and 5s for 1000000 digits (float decimal int.from_bytes() and int() for binary bases 2 4 8 16 and 32 are not affected). The highest threat from this vulnerability is to system availability.
...
Auth0 JsonWebToken Library Installed (Windows)
Binary data auth0jsonwebtokenwininstalled.nbin...
Infinite Loop Vulnerability in endIdForWithdraw() Function.
Lines of code Vulnerability details Impact While loop within the endIdForWithdraw function. while left time test = left + right / 2; // left test right because left right - 1 if queuetest.availableAt = time left = test; else right = test; This loop can cause an infinite loop if the loop invariant...
Out-of-Bounds Write
w3m is vulnerable to out-of-bounds writes. checkType located in etc.c could be triggered by sending a crafted HTML file to the w3m binary, which allows an attacker to cause Denial of Service or possibly have unspecified other impact...
ALPINE-CVE-2022-41861
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
Design/Logic Flaw
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems
A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index PyPI repository that are designed to drop malware on compromised developer systems. The packages – named colorslib versions 4.6.11 and 4.6.12, httpslib versions 4.6.9 and 4.6.11, and libhttps version...
TIBCO JasperReports Library JAR Detection
Binary data tibcojasperreportslibraryjardetect.nbin...
Metasploit Weekly Wrap-Up
New module content 2 Gather Dbeaver Passwords Author: Kali-Team Type: Post Pull request: 17337 contributed by cn-kali-team Description: This adds a post exploit module that retrieves Dbeaver session data from local configuration files. It is able to extract and decrypt credentials stored in these...
Schneider Electric APC Easy UPS Online Monitoring Software Detection
Binary data schneiderelectricupsmonitoringsoftwaredetect.nbin...
Schneider Electric APC Easy UPS Online Monitoring Software Missing Authentication (CVE-2022-42970)
Binary data schneiderelectricupsmonitoringsoftwarecve-2022-42970.nbin...
Binary vulnerability exists in Vim (CNVD-2023-18122)
Vim is a cross-platform text editor that is vulnerable to a binary vulnerability that could be exploited by attackers to execute arbitrary code...
