48 matches found
Dante 代码注入漏洞
Dante is an application by the individual developer Miguel Michelson Martinez. A code injection vulnerability exists in Dante version 0.4.4 and earlier, which stems from a cross-site scripting attack that could lead to a remote attack...
Dante Discovery Detection (Windows)
Binary data dantediscoverywininstalled.nbin...
openSUSE Security Advisory (openSUSE-SU-2025:0030-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dante Discovery Process Control Vulnerability
Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code...
OPENSUSE-SU-2025:0030-1 Security update for dante
This update for dante fixes the following issues: - Update to version 1.4.4 Fixed incorrect access control for some sockd.conf configurations involving socksmethod boo1234688, CVE-2024-54662...
Security update for dante (moderate)
openSUSE Security Update: Security update for dante Announcement ID: openSUSE-SU-2025:0030-1 Rating: moderate References: 1234688 Cross-References: CVE-2024-54662 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update for...
SUSE CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
DEBIAN-CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
UBUNTU-CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
Inferno Nettverk Dante 安全漏洞
Inferno Nettverk Dante is a free SOCKS server from Inferno Nettverk. A security vulnerability exists in Inferno Nettverk Dante versions 1.4.0 through 1.4.3 that stems from incorrect access control for some configurations...
CVE-2024-54662
CVE-2024-54662 affects Dante 1.4.0–1.4.3; an incorrect access control issue in sockd.conf configurations involving socksmethod could lead to high-severity impact on confidentiality and integrity (CVSS 9.1). The issue is fixed in Dante 1.4.4, with remediation recommended to upgrade to that version...
CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
CVE-2024-54662
Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...
PT-2024-36397
Name of the Vulnerable Software and Affected Versions Dante versions 1.4.0 through 1.4.3 Description The issue is related to incorrect access control for some sockd.conf configurations involving the socksmethod. This problem affects certain settings and can lead to unauthorized access...
VulnCheck KEV: CVE-2022-23748
Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code...
Icinga Web 2.10 - Authenticated Remote Code Execution Exploit
!/usr/bin/env python3 Exploit Title: Icinga Web 2.10 - Authenticated Remote Code Execution Exploit Author: Dante CoronaAka. cxdxnt Software Link: https://github.com/Icinga/icingaweb2 Vendor Homepage: https://icinga.com/ Software Link: https://github.com/Icinga/icingaweb2 Version: 2.8.6, 2.9.6, 2....