8264 matches found
pwncli
This is an offensive tool for binary exploitation. The primary vulnerability targeted is not explicitly stated, but the code and documentation suggest that it is a buffer overflow vulnerability in a binary named "stackoverflownopie" and "stackoverflowpie". The tool, named "pwncli", is designed to...
EulerOS Virtualization 2.11.0 : openssl (EulerOS-SA-2023-3382)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...
EulerOS Virtualization 2.11.1 : shim (EulerOS-SA-2023-3368)
According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the function...
EulerOS Virtualization 2.9.0 : traceroute (EulerOS-SA-2024-1023)
According to the versions of the traceroute package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. CVE-2023-46316...
EulerOS 2.0 SP10 : openssl (EulerOS-SA-2023-3225)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck,...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2023-2883)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck,...
EulerOS Virtualization 2.9.1 : shim (EulerOS-SA-2023-3095)
According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate...
EulerOS 2.0 SP9 : traceroute (EulerOS-SA-2023-3319)
According to the versions of the traceroute package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. CVE-2023-46316 Note that Tenabl...
CLSA-2024-1705077885 Fix of 8 CVEs
SECURITY UPDATE: use-after-free in winclose - debian/patches/CVE-2023-48231.patch: check window is valid, before accessing it - CVE-2023-48231 SECURITY UPDATE: overflow with count for :s command - debian/patches/CVE-2023-48233.patch: abort the :s command if the count is too large - CVE-2023-48233...
Denial of service
A denial service vulnerability has been found on Hex Workshop affecting version 6.7, an attacker could send a command line file arguments and control the Structured Exception Handler SEH records resulting in a service shutdown...
Bugsy - Command-line Interface Tool That Provides Automatic Security Vulnerability Remediation For Your Code
Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identify and...
Hex Workshop Buffer Error Vulnerability
Hex Workshop is a suite of hexadecimal development tools for Microsoft Windows that combines advanced binary editing with the ease of use and flexibility of a word processor. A buffer error vulnerability exists in Hex Workshop version 6.7, which stems from the presence of a denial of service DOS...
PT-2024-15552 · Unknown · Hex Workshop
Name of the Vulnerable Software and Affected Versions: Hex Workshop version 6.7 Description: A denial of service issue has been identified, where an attacker can send command line file arguments to control the Structured Exception Handler SEH records, resulting in a service shutdown...
PT-2024-1117 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S9 Junos OS versions 21.2 prior to 21.2R3-S6 Junos OS versions 21.3 prior to 21.3R3-S5 Junos OS versions 21.4 prior to 21.4R3 Junos OS versions 22.1 prior to 22.1R3 Junos OS versions 22.2 prior to 22.2R2 Juno...
Improper Access Control
Overview Affected versions of this package are vulnerable to Improper Access Control when using X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a...
Amazon Linux AMI : vim (ALAS-2024-1902)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1902 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be...
PT-2024-14035 · Appwrite · Appwrite Cli
Name of the Vulnerable Software and Affected Versions: Appwrite CLI versions prior to 3.0.0 Description: The issue arises when using the login command in Appwrite CLI, where the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. This allows...
CLSA-2023-1703785140 openssh: Fix of CVE-2023-51385
CVE-2023-51385: ban user/hostnames with most shell metacharacters in command line...
