Lucene search
+L

509 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/11 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2019-16910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might...

5.3CVSS6AI score0.01773EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/07/16 12:00 a.m.•33 views

CVE-2025-32874

An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A vulnerability exists in the EncryptionUtil class because symmetric encryption is implemented in a deterministic and non-randomized fashion. The method Encryptbyte clearData derives both the encryption key and...

0.00084EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/16 12:00 a.m.•1 views

CVE-2025-32874: Inadequate Encryption Strength

An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A vulnerability exists in the EncryptionUtil class because symmetric encryption is implemented in a deterministic and non-randomized fashion. The method Encryptbyte clearData derives both the encryption key and...

7.5CVSS8AI score0.00084EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/16 12:00 a.m.•51 views

CVE-2025-32874

A cryptographic implementation flaw exists in Kaseya Rapid Fire Tools Network Detective versions through 2.0.16.0 . The vulnerability is located in the EncryptionUtil class, where the Encrypt(byte[] clearData) method implements symmetric encryption in a deterministic and non-randomized fashion. S...

7.5CVSS9.5AI score0.00084EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2025/07/14 12:00 a.m.•14 views

From Alerts to Intelligence: a Novel LLM-Aided Framework for Host-Based Intrusion Detection

Host-based intrusion detection system HIDS is a key defense component to protect the organizations from advanced threats like Advanced Persistent Threats APT. By analyzing the fine-grained logs with approaches like data provenance, HIDS has shown successes in capturing sophisticated attack traces...

7AI score
SaveExploits0
OSV
OSV
•added 2025/07/11 12:52 p.m.•28 views

CLSA-2025-1752238368 Update of gnutls

Fix timing side-channel in deterministic ECDSA RHEL-28958 - Fix potential crash during chain building/verification RHEL-28953...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/09 12:00 a.m.•19 views

PT-2025-28963

Name of the Vulnerable Software and Affected Versions Kaseya Rapid Fire Tools Network Detective versions through 2.0.16.0 Description A cryptographic implementation flaw exists in the password encryption mechanism within the EncryptionUtil class. Symmetric encryption is implemented in a...

7.5CVSS9.4AI score0.00084EPSS
SaveExploits0References12
Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•16 views

CipherMind: the Longest Codebook in the World

In recent years, the widespread application of large language models has inspired us to consider using inference for communication encryption. We therefore propose CipherMind, which utilizes intermediate results from deterministic fine-tuning of large model inferences as transmission content. The...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 4:52 p.m.•25 views

CVE-2020-8929

A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This can be a problem with encrypting...

5.3CVSS6.6AI score0.00463EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:39 p.m.•19 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS7AI score0.03163EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/22 8:48 a.m.•15 views

CLSA-2025-1747903683 gnutls: Fix of 2 CVEs

CVE-2024-28834: fix side-channel leak in the deterministic ECDSA - CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates...

5.3CVSS5.8AI score0.00724EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/05/14 12:00 a.m.•19 views

CANTXSec: a Deterministic Intrusion Detection and Prevention System for CAN Bus Monitoring ECU Activations

Despite being a legacy protocol with various known security issues, Controller Area Network CAN still represents the de-facto standard for communications within vehicles, ships, and industrial control systems. Many research works have designed Intrusion Detection Systems IDSs to identify attacks ...

7AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2025/04/23 1:11 p.m.•9 views

Security update for libxslt

This update for libxslt fixes the following issues: CVE-2025-24855: Fix use-after-free of XPath context node bsc1239625 CVE-2024-55549: Fix UAF related to excluded namespaces bsc1239637 CVE-2023-40403: Make generate-id deterministic bsc1238591 Patch Instructions: To install this SUSE update use t...

7.8CVSS7.3AI score0.01327EPSS
SaveExploits4References12
OSV
OSV
•added 2025/04/22 1:46 p.m.•6 views

SUSE-SU-2025:20277-1 Security update for libxslt

This update for libxslt fixes the following issues: CVE-2025-24855: Fix use-after-free of XPath context node bsc1239625 CVE-2024-55549: Fix UAF related to excluded namespaces bsc1239637 CVE-2023-40403: Make generate-id deterministic bsc1238591...

7.8CVSS6.9AI score0.01327EPSS
SaveExploits4References7
SUSE Linux
SUSE Linux
•added 2025/04/22 1:46 p.m.•9 views

Security update for libxslt

This update for libxslt fixes the following issues: CVE-2025-24855: Fix use-after-free of XPath context node bsc1239625 CVE-2024-55549: Fix UAF related to excluded namespaces bsc1239637 CVE-2023-40403: Make generate-id deterministic bsc1238591 Patch Instructions: To install this SUSE update use t...

7.8CVSS7.3AI score0.01327EPSS
SaveExploits4References12
Packet Storm News
Packet Storm News
•added 2025/04/15 12:00 a.m.•14 views

Progent: Programmable Privilege Control for LLM Agents

LLM agents are an emerging form of AI systems where large language models LLMs serve as the central component, utilizing a diverse set of tools to complete user-assigned tasks. Despite their great potential, LLM agents pose significant security risks. When interacting with the external world, the...

7.3AI score
SaveExploits0
Veracode
Veracode
•added 2025/03/19 6:44 p.m.•16 views

Deserialization Of Untrusted Data

github.com/cosmos/ibc-go is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper deserialization due to non-deterministic behavior when processing acknowledgments, which can halt the chain if exploited by a user opening an IBC channel...

7AI score
SaveExploits0
Veracode
Veracode
•added 2025/03/19 7:55 a.m.•18 views

Denial Of Service

IBC-Go is vulnerable to Denial Of Service. The vulnerability is due to improper handling of JSON unmarshalling for IBC Acknowledgements, allows an attacker to trigger a denial-of-service DoS condition and leads to non-deterministic behavior that can halt the chain...

7AI score
SaveExploits0
OSV
OSV
•added 2025/03/18 3:59 p.m.•19 views

GO-2025-3517 Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go

Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go...

7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/03/12 7:29 p.m.•4 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to inconsistencies in the deserialization process of acknowledgments, leading to non-deterministic behavior that can halt a blockchain network. Note: This is only exploitable if the attacker has the...

9.6CVSS7AI score
SaveExploits0References4
Rows per page
Query Builder