snapd 竞争条件问题漏洞

snapd is an open source, cross-platform package management tool. snapd suffers from a compete condition issue vulnerability that stems from a compete condition occurring in the snapd snap- restrict binary when it prepares a private /tmp mount causing a local attacker to potentially elevate...

Splunk API Settings

Binary data splunksettings.nbin...

A new strain of Punisher ransomware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new variant of the Punisher ransomware is spreading via phishing website that delivers ransomware disguised as a COVID tracking application. Punisher Encryptor is a .NET binary that runs on Windows...

Delta Electronics InfraSuite Device Master Gateway Information Disclosure (CVE-2022-41629)

Binary data deltaelectronicsidmcve-2022-41629.nbin...

Sysmon Installed (Windows)

Binary data sysmonwininstalled.nbin...

Delta Electronics InfraSuite Device Master Gateway Detection

Binary data deltaelectronicsidmgatewaydetect.nbin...

Binary vulnerability in libarchive (CNVD-2022-90746)

libarchive is a multi-format archive and compression library. A binary vulnerability exists in libarchive, which can be exploited by attackers to execute arbitrary code...

SUSE SLES15 Security Update : cni (SUSE-SU-2022:4150-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4150-1 advisory. - CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration bsc1181961. Tenable has extracted the preceding...

OpenSSL Detection (Windows)

Binary data opensslwininstalled.nbin...

The vulnerability of the Binary_string::free_buffer() function in the /sql/sql_string.h component of the MariaDB database, which allows a attacker to cause a service failure.

The vulnerability of the Binarystring::freebuffer function in the /sql/sqlstring.h component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause service interruptions...

Qualys Cloud Security Agent Installed (Windows)

Binary data qualyscloudagentwininstalled.nbin...

OpenSSL Installed (Linux)

Binary data opensslnixinstalled.nbin...

AlmaLinux 9 : qt5 (ALSA-2022:8022)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8022 advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not foun...

GHSA-JVP9-PHWP-P738 LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

AlmaLinux 9 : podman (ALSA-2022:8431)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8431 advisory. - An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data...

PYSEC-2022-43140

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

LIEF 缓冲区错误漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v0.12.1, which stems from a heap buffer overflow in the...

PT-2022-26788 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF versions prior to 0.12.3 Description: A heap buffer overflow in the parse dyldinfo generic bind function of LIEF's BinaryParser allows attackers to cause a Denial of Service DoS via a crafted MachO file. Recommendations: For versions pri...

Microsoft Azure Command-Line Interface (CLI) Installed (Windows)

Binary data microsoftazurecliinstalledwin.nbin...

podman: possible information disclosure and modification

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...