18 matches found
EUVD-2018-12172
Malware in sbrugna...
CVE-2020-25758
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...
USN-7206-1 Several security issues were fixed in rsync
Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle checksum lengths. An attacker could use this issue to execute arbitrary code. CVE-2024-12084 Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync compared checksums with...
PT-2023-35500 · Git-Annex · Git-Annex
Name of the Vulnerable Software and Affected Versions: git-annex versions prior to 6.20160419 Description: A bug in git-annex exposed the checksum of annexed files to encrypted special remotes, which should not have access to this information. This issue occurred when resuming uploads to the...
XpressEngine 代码问题漏洞
XpressEngine is a CMS Content Management System that allows anyone to publish content easily, conveniently and freely. A security vulnerability exists in XpressEngine versions prior to 3.0.14, which stems from the presence of insufficient file checksums and an arbitrary file upload vulnerability...
CVE-2020-25758
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...
CVE-2018-1593
IBM Multi-Cloud Data Encryption MDE 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568...
CVE-2018-1593
IBM Multi-Cloud Data Encryption MDE 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568...
Design/Logic Flaw
IBM Multi-Cloud Data Encryption MDE 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568...
CVE-2018-1593
IBM Multi-Cloud Data Encryption MDE 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568...
CVE-2018-1593
CVE-2018-1593 affects IBM Multi-Cloud Data Encryption (MDE) 2.1. The vulnerability stems from missing file checksums, enabling an unauthorized user to manipulate data. Affected versions are MDE 2.1–2.1.0.1. IBM’s bulletin lists remediation: upgrade to MDE 2.1.0.2 (Multiplatform English via Passpo...
Sql injection
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest...
File Checksums: Violations
List files with checksum violations. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103942";...
File Checksums: Matches
List files with no checksum violation or error. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
File Checksums
Checks the checksums MD5 or SHA1of specified files. The SSH protocol is used to log in and to gather the needed information. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
File Checksums: Errors
List files with checksum errors missing files or other errors. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zabbix 1.1x1.4.x - File Checksum Request Denial of Service
Zabbix 1.1x1.4.x - File Checksum Request Denial of Service source: https://www.securityfocus.com/bid/28244/info ZABBIX is prone to a denial-of-service vulnerability when handling specially crafted requests for file checksums. An attacker can exploit this issue to cause the affected application to...
tcp_wrappers-CERT.txt
Date: Fri, 22 Jan 1999 20:12:36 -0500 From: Eric To: [email protected] Subject: CERT Advisory CA-99.01 - TCP Wrappers Trojan Horse fwd Date: Fri, 22 Jan 1999 16:42:00 -0500 Message-Id: From: CERT Advisory To: [email protected] Subject: CERT Advisory CA-99.01 - TCP Wrappers Trojan Hor...