Lucene search
+L

237 matches found

Schneier on Security
Schneier on Security
added 2022/11/29 12:19 p.m.13 views

Charles V of Spain Secret Code Cracked

Diplomatic code cracked after 500 years: In painstaking work backed by computers, Pierrot found "distinct families" of about 120 symbols used by Charles V. "Whole words are encrypted with a single symbol" and the emperor replaced vowels coming after consonants with marks, she said, an inspiration...

0.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/09/28 12:00 a.m.16 views

PT-2022-24849 · Unknown · Matrix Ios Sdk

Name of the Vulnerable Software and Affected Versions: Matrix iOS SDK versions prior to 0.23.19 Description: The issue allows an attacker, in cooperation with a malicious homeserver, to construct messages that appear to come from another person. These messages may be marked with a grey shield on...

7.5CVSS7.2AI score0.00809EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2022/09/26 2:54 p.m.17 views

Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a Thunderbird user replying to a crafted HTML email containing a meta tag, with the meta tag having the http-equiv="refresh" attribute and the content attribute specifying an URL. Thunderbird started a...

8.1CVSS7.6AI score0.00775EPSS
SaveExploits0References6
Citrix
Citrix
added 2021/12/15 12:00 a.m.17 views

Diagnostic data to collect for Citrix Tech Support when a Citrix Browser App fails to launch

To find out what is going wrong when a Citrix browser app fails to launch, tech support needs: Decrypted Fiddler traces, the output from the terminal window, and Citrix Browser debug logs...

7AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2021/11/10 12:17 p.m.18 views

Hacking the Sony Playstation 5

I just dont think its possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers. The Sony Playstation 5 is the latest example: Hackers may have just made some big strides towards possibly jailbreaking the PlayStation 5 over the weekend,...

7AI score
SaveExploits0
OSV
OSV
added 2021/06/02 4:15 p.m.6 views

DEBIAN-CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS6.5AI score0.00609EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2021/06/02 4:15 p.m.7 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS6.7AI score0.00609EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/02 4:15 p.m.15 views

UBUNTU-CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS6.6AI score0.00609EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/06/02 12:00 a.m.71 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS6.3AI score0.00609EPSS
SaveExploits0
OSV
OSV
added 2021/05/07 5:35 a.m.17 views

MGASA-2021-0208 Updated messagelib packages fix security vulnerability

Deleting an attachment of a decrypted encrypted message stored on a remote server e.g. an IMAP server causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. With a specially...

6.5CVSS6.3AI score0.00609EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/05/07 5:35 a.m.70 views

Updated messagelib packages fix security vulnerability

Deleting an attachment of a decrypted encrypted message stored on a remote server e.g. an IMAP server causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. With a specially...

6.5CVSS2.3AI score0.00609EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/07 8:36 p.m.9 views

GHSA-77G3-3J5W-64W4 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchiv...

6.8CVSS6.7AI score0.00379EPSS
SaveExploits0References11
Schneier on Security
Schneier on Security
added 2020/12/16 1:01 p.m.34 views

Zodiac Killer Cipher Solved

The SF Chronicle is reporting more details here, and the FBI is confirming, that a Melbourne mathematician and team has decrypted the 1969 message sent by the Zodiac Killer to the newspaper. Theres no paper yet, but there are a bunch of details in the news articles. Heres an interview with one of...

2.2AI score
SaveExploits0
OSV
OSV
added 2020/10/21 7:15 p.m.10 views

CVE-2020-3585

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

3.7CVSS6.5AI score0.01254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/09/22 12:00 a.m.8 views

PT-2020-13626 · Espressif · Esp32

Name of the Vulnerable Software and Affected Versions: ESP32 affected versions not specified Description: The issue concerns bypassing Secure Boot and Flash Encryption on ESP32 chips. It allows extracting decrypted flash data from a fully protected ESP32 chip using chip-level weaknesses, without...

6.8AI score
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:00 a.m.25 views

EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2020-1752)

According to the version of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypte...

5.7CVSS5.5AI score0.01495EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/11 2:15 p.m.30 views

CVE-2020-10685

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchiv...

5.5CVSS5.4AI score
SaveExploits0References4
NVD
NVD
added 2020/05/11 2:15 p.m.25 views

CVE-2020-10685

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchiv...

5.5CVSS6AI score0.00379EPSS
SaveExploits0References4
OSV
OSV
added 2020/05/11 2:15 p.m.6 views

DEBIAN-CVE-2020-10685

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchiv...

5.5CVSS8.8AI score0.00379EPSS
SaveExploits0References1
PyPA
PyPA
added 2020/05/11 2:15 p.m.10 views

PYSEC-2020-1

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchiv...

5.5CVSS6.6AI score0.00379EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder