CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

IIS-Backdoor

IIS-Backdoor In this article I will explain how I designed a rootkit for Microsoft Internet Information Services IIS.The question is: why a backdoor in a web server? First obvious but useless answer: because we can. Ok, let us give a more clever answer. The purpose of backdooring a web sever is...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

Show Your Support If you find this script useful and it has helped you safeguard your systems against CVE-2024-3094, please consider giving it a star ⭐ . Starring this repository not only shows your support but also helps more people discover and benefit from our collective effort to improve...

Sicurezza-Informatica-Presentazione

What does this repository contain? This repository contains a brief research and presentation of the security flaw regarding XZ Utils for the UNIPR cybersecurity course CVE-2024-3094 Description of the flaw by Ubuntu: Malicious code was discovered in the upstream tarballs of xz, starting with...

xz-utils-vuln-checker

/ / / / | |/// / / / / / / / / / / / / / / //// // / / / / / / / //|| // ,/ / // // // Hare Krishna Rai 0xblurr3d / / / / / / | | / / / / / / / / / \ / / / \ / \ / / / /// / \ / / | |/ / / // / / / / / / //// / / / / // // / / , / / / / |/ ,/ // // // / // // / / //|| / // CVE-2024-3094 +...

TencentOS Server 3: python3.12-urllib3 (TSSA-2026:1426)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1426 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-140442

Insufficient protection of communications in Progress WS FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive information or modify requests when unencrypted connections are used...

CVE-2026-19129

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a network-positioned attacker to intercept backup data due to improper verification of the backup server's identity. The identity of the backup server is not verified when the secure connection for analytics...

CVE-2026-5345

HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://test instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...

CVE-2026-35110

HCL AION is affected by a vulnerability where encrypted HTTPS communication was not enforced for all requests. Data may be transmitted over unencrypted connections and intercepted by an attacker on the network, potentially resulting in unintended behavior or security impact under certain conditio...

CVE-2026-21849

HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://localhost:8000 instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...

EUVD-2026-118262

HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://test instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...

CVE-2026-5345 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://test instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...

CVE-2026-5345

The HCL AION platform is affected by a missing encryption vulnerability (CWE-311) within the GenAI web interface . The vulnerability stems from a second WebSocket connection using the unencrypted ws://test protocol instead of the secure wss:// channel. This flaw could allow an attacker on the net...

EUVD-2026-118261

HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://localhost:8000 instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...

CVE-2026-21849

HCL AION is affected by a missing encryption vulnerability within the GenAI web interface . The application uses an unencrypted WebSocket protocol (ws://localhost:8000 ) instead of a secure wss:// channel. This configuration could allow an attacker on the network to intercept or read data exchang...

CVE-2026-21849 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://localhost:8000 instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...

CVE-2026-35110

HCL AION is affected by a vulnerability where encrypted (HTTPS) communication is not enforced for all requests. This flaw allows data to be transmitted over unencrypted connections , which could be intercepted by an attacker on the network. Such interception may lead to unintended behavior or oth...

CVE-2026-35110 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where encrypted HTTPS communication was not enforced for all requests. Data may be transmitted over unencrypted connections and intercepted by an attacker on the network, potentially resulting in unintended behavior or security impact under certain conditio...