GHSA-V592-XF75-856P Erroneous Proof of Work calculation in geth

Impact An ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate PoW in an upcoming epoch estimated early January, 2021. This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected. Patches This issue is also...

CVE-2020-24944

picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...

KamiD Cosmos Network Ethermint Security Vulnerability

KamiD Cosmos Network Ethermint is a pre-alpha software from the American Bcamarneiro KamiD personal organization. It provides a scalable, high-throughput proof-of-stake blockchain that is fully compatible and interoperable with Ethermint. A security vulnerability exists in KamiD Cosmos Network...

DEBIAN-CVE-2020-24585

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS applicationdata messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application...

UBUNTU-CVE-2020-24585

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS applicationdata messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application...

CVE-2020-24585

Overview An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS applicationdata messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application. Remediation Upgrade wolfssl to version 4.5.0 or higher...

Exploit for OS Command Injection in Paloaltonetworks Pan-Os

CVE-2020-2034-POC Determine the Version Running on the Palo Al...

ATutor LMS 2.2.4 Weak Password Reset Hash

Exploit Title: ATutor LMS 2.2.4 - Weak Password Reset Hash Date: 2020-05-05 Exploit Author: Hodorsec Version: 2.2.4 Software Link: https://atutor.github.io/atutor/downloads.html Vendor Homepage: https://atutor.github.io Tested on: Debian 10 x64 - PHP 7.3.15-3 Problem: While the original intention...

Validation Bypass

github.com/pion/dtls is vulnerable to validation bypass . The function handleIncomingPacket is not validating the incoming application data with epoch 0, accepting a remote user provided unencrypted or unauthenticated data after handshake completion...

CVE-2019-20786

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion...

CVE-2019-20786

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion...

Design/Logic Flaw

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion...

Preparing for Y2038 (Already?!)

It somehow doesn't seem that long ago, but nineteen years ago during Y2K I spent my New Year's Eve in the Akamai Network Operations center, waiting to respond to anything that might go awry as the clock struck midnight in key time zones such as Greenwich and Boston. As of January 9, 2019, we are...

Threat Actors Target Chinese Language News Sites

A California-based news website covering China, called China Digital Times, was targeted in a spying campaign that involved phishing lures and the use of the NetWire remote access Trojan. The attacks began in February 2017 and were part of a wider campaign of phishing, reconnaissance and malware...

DEBIAN-CVE-2016-2181

The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service false-positive packet drops via spoofed DTLS records, related to reclayerd1...

UBUNTU-CVE-2016-2181

The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service false-positive packet drops via spoofed DTLS records, related to reclayerd1...

CVE-2016-1211

Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1211

Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1211

CVE-2016-1211 is an XSS vulnerability in Epoch Web Mailing List 0.31 and earlier. The issue allows remote injection of arbitrary script/HTML via unspecified vectors. Affected component is the Web Mailing List frontend; underlying cause is cross-site scripting in the application’s handling of inpu...