EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-2854)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sen...

CVE-2024-0468

creationtimestamp| type| source ---|---|--- 2024-01-12 22:41:49+00:00| seen| https://t.me/ctinow/167572 2024-02-02 10:41:29+00:00| seen| https://t.me/ctinow/178020...

CVE-2023-49647

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2023-49569 Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the ChrootO...

CVE-2023-49568 Maliciously crafted Git server replies can cause DoS on go-git clients

A denial of service DoS vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using on...

CVE-2023-49568 Maliciously crafted Git server replies can cause DoS on go-git clients

A denial of service DoS vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using on...

dotnet: .NET Denial of Service Vulnerability

A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making...

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

Impact A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the...

CVE-2023-39853

creationtimestamp| type| source ---|---|--- 2024-01-06 05:31:41+00:00| seen| https://t.me/ctinow/163819 2024-01-11 17:17:11+00:00| seen| https://t.me/ctinow/166653 2024-01-25 00:21:22+00:00| seen| https://t.me/ctinow/173180...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2024-1021)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

CVE-2023-32879

creationtimestamp| type| source ---|---|--- 2024-01-02 04:26:56+00:00| seen| https://t.me/ctinow/161474 2024-01-03 01:31:23+00:00| seen| https://t.me/cibsecurity/74129 2024-01-22 15:11:34+00:00| seen| https://t.me/ctinow/171209...

Velociraptor 0.7.1 Release

Written by Dr. Michael Cohen Sigma Support, ETW Multiplexing, Local Encrypted Storage and New VQL Capabilities Highlight the Last Release of 2023 Rapid7 is excited to announce that version 0.7.1 of Velociraptor is live and available for download. There are several new features and capabilities th...

CVE-2023-7146

creationtimestamp| type| source ---|---|--- 2023-12-29 03:26:27+00:00| seen| https://t.me/ctinow/160292 2024-02-05 20:15:07+00:00| seen| https://t.me/cibsecurity/73865...

[SECURITY] Fedora 39 Update: squid-6.6-1.fc39

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Sql injection

A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-50857

creationtimestamp| type| source ---|---|--- 2023-12-28 12:26:45+00:00| seen| https://t.me/ctinow/160015 2024-01-20 10:41:32+00:00| seen| https://t.me/ctinow/170580...

CVE-2023-7124

creationtimestamp| type| source ---|---|--- 2023-12-28 04:26:29+00:00| seen| https://t.me/ctinow/159916 2024-01-04 21:21:58+00:00| seen| https://t.me/ctinow/163225 2024-01-19 16:11:58+00:00| seen| https://t.me/ctinow/170257...

PT-2023-32902 · Unknown · Code-Projects Client Details System

Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A vulnerability was found in the code-projects Client Details System, classified as problematic. It affects an unknown function of the file /admin/update-clients.php. The manipulati...

NewStart CGSL MAIN 6.06 : bind Multiple Vulnerabilities (NS-SA-2023-0094)

The remote NewStart CGSL host, running version MAIN 6.06, has bind packages installed that are affected by multiple vulnerabilities: - By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter...