Lucene search
+L

560 matches found

Kitploit
Kitploit
•added 2023/11/04 11:30 a.m.•48 views

TEx - Telegram Monitor

TEx is a Telegram Explorer tool created to help Researchers, Investigators and Law Enforcement Agents to Collect and Process the Huge Amount of Data Generated from Criminal, Fraud, Security and Others Telegram Groups. BETA VERSION Please note that this project has been in beta for a few weeks, so...

7.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/08/23 12:00 a.m.•82 views

Microsoft Windows Multiple Vulnerabilities (KB5009543)

This host is missing an important security update according to Microsoft KB5009543 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

10CVSS7.3AI score0.9279EPSS
SaveExploits33References3
CVE
CVE
•added 2023/07/26 12:00 a.m.•319 views

CVE-2023-30367

The CVE-2023-30367 entry concerns mRemoteNG prior to fixed versions (<= v1.76.20 and

7.5CVSS7.5AI score0.0048EPSS
SaveExploits4References4Affected Software1
Citrix
Citrix
•added 2023/05/10 12:00 a.m.•15 views

Open Citrix ICA file Failed with No Response

Suddenly, all the ICA files downloaded from web can't be opened. User double-clicked them, but the Windows system didn't respond by opening the CWA connection manager...

7.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/03/27 12:00 a.m.•5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that an attacker with a locally privileged account can disclose kernel stack information when issui...

2.3CVSS6.7AI score0.00199EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 4:41 a.m.•12 views

SUSE CVE-2017-12865

Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted response query string passed to the "name" variable...

9.8CVSS8.1AI score0.05519EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/31 12:00 a.m.•26 views

mRemoteNG 安全漏洞

mRemoteNG is mRemoteNG open source an open source, tabbed, multi-protocol remote connection manager for Windows. A security vulnerability exists in mRemoteNG version 1.76.20 that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS7.5AI score0.00368EPSS
SaveExploits1References5
OSV
OSV
•added 2022/12/14 2:21 a.m.•49 views

GO-2022-1148 Resource exhaustion in github.com/libp2p/go-libp2p

go-libp2p is vulnerable to targeted resource exhaustion attacks. These attacks target libp2p's connection, stream, peer, and memory management. An attacker can cause the allocation of large amounts of memory ultimately leading to the process getting killed by the host's operating system. While a...

7.5CVSS7.3AI score0.01013EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•2 views

CVE-2022-23492: Uncontrolled Resource Consumption

go-libp2p is the offical libp2p implementation in the Go programming language. Version 0.18.0 and older of go-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause the allocation of large...

7.5CVSS5.7AI score0.01013EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/12/07 11:13 p.m.•57 views

libp2p DoS vulnerability from lack of resource management

Impact Versions older than v0.18.0 of go-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause the allocation of large amounts of memory, ultimately leading to the process getting killed ...

7.5CVSS7.4AI score0.01013EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2022/12/07 11:13 p.m.•87 views

GHSA-J7QP-MFXF-8XJW libp2p DoS vulnerability from lack of resource management

Impact Versions older than v0.18.0 of go-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause the allocation of large amounts of memory, ultimately leading to the process getting killed ...

7.5CVSS7.3AI score0.01013EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/12/07 12:00 a.m.•14 views

PT-2022-16021 · Js-Libp2P · Js-Libp2P

Name of the Vulnerable Software and Affected Versions: js-libp2p versions prior to v0.38.0 Description: The issue concerns targeted resource exhaustion attacks that affect libp2p's connection, stream, peer, and memory management. An attacker can cause the allocation of large amounts of memory,...

7.5CVSS7.4AI score0.00708EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•1 views

CVE-2022-23487: Uncontrolled Resource Consumption

js-libp2p is the official javascript Implementation of libp2p networking stack. Versions older than v0.38.0 of js-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause the allocation of...

7.5CVSS5.7AI score0.00708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/11/25 12:00 a.m.•15 views

The vulnerability of the Remote Access Connection Manager service on the Windows operating system allows a hacker to gain unauthorized access to the device.

The vulnerability of the Remote Access Connection Manager service in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

5.5CVSS6.7AI score0.00853EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2022/11/15 11:55 a.m.•17 views

kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free

A vulnerability was found in the Linux kernel's nvme-rdma driver where the driver failed to destroy a component cmid before another component qp was destroyed. This issue occurs when the kernel incorrectly manages memory during RDMA, leading to a potential use-after-free...

9.8CVSS7.2AI score0.01166EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/11/08 9:32 a.m.•14 views

kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free

A vulnerability was found in the Linux kernel's nvme-rdma driver where the driver failed to destroy a component cmid before another component qp was destroyed. This issue occurs when the kernel incorrectly manages memory during RDMA, leading to a potential use-after-free...

9.8CVSS7.2AI score0.01166EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/11/08 9:32 a.m.•15 views

kernel: RDMA/cm: Fix memory leak in ib_cm_insert_listen

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix memory leak in ibcminsertlisten cmallocidpriv allocates resource for the cmidpriv. When cminitlisten fails it doesn't free it, leading to memory leak. Add the missing error unwind...

5.5CVSS6.3AI score0.00281EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/10/20 12:00 a.m.•10 views

PT-2025-37593

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-syzkaller-12189-g19d17ab7c68b-dirty Description The Linux kernel contained a data race condition related to kcm-rx psock. Specifically, kcm-rx psock could be read without a lock in the kcm rfree function...

8.8CVSS5.9AI score0.00235EPSS
SaveExploits0References420
OSV
OSV
•added 2022/10/18 9:15 p.m.•16 views

CVE-2022-21601

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS5.8AI score0.00666EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/18 12:00 a.m.•2 views

CVE-2022-21601: Undefined Security Weakness

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS6.4AI score0.00666EPSS
SaveExploits0References1
Rows per page
Query Builder