CAN-2005-2654

CVE-2005-2654 affects phpldapadmin and allows anonymous access to the LDAP server via login.php with anonymous_bind, even when disable_anon_bind is configured. Related advisories (Debian DSA-790-1, Gentoo GLSA 2005-09-04) describe authentication bypass for phpldapadmin and note updates/upgrades (...

CAN-2005-1937

CVE-2005-1937 appears across multiple advisories tied to Mozilla/Firefox components. Connected documents show CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and references in Ubuntu USN-149-1, Debian DSA-810-1, Gentoo GLSA 200507-24, FreeBSD ports Firefox advisories. Affected products include Firefox...

CAN-2005-2495

The CVE 2005-2495 entry is corroborated by the connected Nessus plugins for Solaris 10, which identify X11/Xsun (X11 6.6.2) as the affected component and enumerate patch-based mitigations. Affected products include Solaris 10 on x86 and SPARC; vulnerable component is Xsun (X11 6.6.2). The underly...

CAN-2005-2498

The connected OpenVAS/Gentoo/SuSE Slackware advisories reference CVE-2005-2498 in multiple contexts (Gentoo GLSA 200508-14 and 200508-18 for tikiwiki/egroupware; SLES9 PHP4 update; Slackware SSA entries). Reported CVSS base 7.5 in these records; no concrete exploit details or vulnerable versions ...

CAN-2005-2871

Summary (CVE-2005-2871) : A buffer/heap overflow in IDN hostname handling affects Mozilla Firefox and derivatives (e.g., Thunderbird). Improper processing of international domain names (IDN) can allow a remote attacker to cause a crash or execute arbitrary code in the user’s security context. The...

CAN-2005-2660

CVE-2005-2660 affects apachetop (versions 0.12.5 and earlier). The issue arises when apachetop runs in debug mode: it creates a temporary file insecurely in /tmp (atop.debug), which can be targeted by a local attacker via a symlink attack to overwrite arbitrary files with the webserver/user runni...

CAN-2005-3150

CVE-2005-3150 affects the weex FTP client. A format string vulnerability could allow remote code execution. Debian/ Gentoo advisories note fixes: weex 2.6.1-6sarge1 (and 2.6.1-4woody2 for woody). Upgrading to the patched package is recommended; old versions are vulnerable. The issue is a remote v...

CAN-2005-2875

The CVE CAN-2005-2875 corresponds to Py2Play, a peer-to-peer game engine, where a design error allows remote code execution by processing untrusted pickled objects. Public advisories (Debian DSA-856-1 and related Debian/Nessus entries) describe that Py2Play can execute arbitrary code received fro...

The Future of MATIC and What to Expect in 2024

By Uzair Amir The world of cryptocurrency is unpredictable yet lucrative. Understanding the workings and creation of crypto is a topic… This is a post from HackRead.com Read the original post: The Future of MATIC and What to Expect in 2024...

I Stopped Using Passwords. It's Great—and a Total Mess

Passkeys are here to replace passwords. When they work, it’s a seamless vision of the future. But don’t ditch your old logins just yet...

CVE-2023-49668

CVE-2023-49668 is reported as a High-severity issue affecting UNISOC kernel components. Connected Android security details confirm the vulnerability is tracked under UNISOC Kernel in the 2024-02-01 Android bulletin, with mitigation via Android patch levels and vendor updates. External CNNCVD info...

Nervos CKB node panics when processing a block which parent timestamp is too new

Impact Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. Patches Please upgrade to v0.34.1...

GHSA-R9RV-9MH8-PXF4 Nervos CKB BlockTimeTooNew should not be considered as invalid block

Impact Currently, when a node receives a block in future according to its local wall clock, it will mark the block as invalid and ban the peer. If the header's timestamp is more than 15 seconds ahead of our current time. In that case, the header may become valid in the future, and we don't want t...

PT-2024-40323 · Os · Os

Name of the Vulnerable Software and Affected Versions: OS version prior to 0.34.1 Description: An issue allows an adversary to initiate a Denial of Service DOS attack by broadcasting two consecutive blocks with timestamps in the future. Recommendations: Upgrade to version 0.34.1 to resolve the...

Microsoft got hacked by state sponsored group it was investigating

In a spy-vs-spy type of scenario, Microsoft has acknowledged that a group called Midnight Blizzard also known as APT29 or Cozy Bear, gained access to a Microsoft legacy non-production test tenant account. According to Microsoft, the group managed to access the account in November after subjecting...

Code Written with AI Assistants Is Less Secure

Interesting research: "Do Users Write More Insecure Code with AI Assistants?": Abstract: We conduct the first large-scale user study examining how users interact with an AI Code assistant to solve a variety of security related tasks across different programming languages. Overall, we find that...

CVE-2023-47342

CVE-2023-47342 is associated with FFmpeg. Multiple connected advisories report an out-of-bounds/out-of-array access in avformat/rtsp that could enable denial of service or remote code execution in affected FFmpeg versions. Slackware Mageia and MageiaOSV entries reference this CVE in the context o...

CVE-2023-47342

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

future-okavango.org Cross Site Scripting vulnerability OBB-3829973

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

To Beat Russia, Ukraine Needs a Major Tech Breakthrough

Ukraine’s top general says his country must innovate on the level of inventing gunpowder to “break military parity” with Russia. If it’s successful, it could change the future of war...