Lucene search
+L

5170 matches found

Cvelist
Cvelist
added 2025/09/14 3:02 a.m.26 views

CVE-2025-10387 codesiddhant Jasmin Ransomware handshake.php sql injection

A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipulation of the argument machinename/computeruser/os/date/time/ip/location/systemid/password causes sql injection. The attack can be initiated...

6.5CVSS0.00414EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/09/14 12:00 a.m.10 views

Jasmin The Ransomware SQL注入漏洞

Jasmin The Ransomware is a powerful ransomware security testing tool used by ReadTeams, a personal developer of Siddhant Gour. Jasmin The Ransomware 1.0.1 and earlier versions suffer from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter...

8.8CVSS7AI score0.00414EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/12 10:15 a.m.9 views

CVE-2025-7448

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle MitM attack...

8.6CVSS0.00176EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/12 9:11 a.m.3 views

CVE-2025-7448 Man in the middle (MitM) attack vulnerability in Wi-SUN library

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle MitM attack...

8.6CVSS6.5AI score0.00176EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/12 9:11 a.m.23 views

CVE-2025-7448 Man in the middle (MitM) attack vulnerability in Wi-SUN library

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle MitM attack...

8.6CVSS0.00176EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/12 9:11 a.m.27 views

CVE-2025-7448

CVE-2025-7448 affects Silicon Labs Wi-SUN Stack. The issue arises from unexpected 4‑Way Handshake packet receptions, which can yield predictable cryptographic keys and potentially enable a Man-in-the-Middle (MitM) attack. Reported by multiple sources, the vulnerability is tied to Wi-SUN Handshake...

8.6CVSS6.5AI score0.00176EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/12 12:00 a.m.11 views

Silicon Labs Wi-SUN Stack 安全漏洞

Silicon Labs Wi-SUN Stack is a communications stack from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Wi-SUN Stack that stems from the fact that accidental reception of a 4-Way Handshake packet may result in a predictable key, potentially triggering a man-in-the-middle attac...

8.6CVSS6.7AI score0.00176EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/12 12:00 a.m.19 views

PT-2025-37298

Name of the Vulnerable Software and Affected Versions: Wi-SUN affected versions not specified Description: The Wi-SUN protocol is susceptible to a flaw related to unexpected 4-Way Handshake packet receptions. This can result in predictable keys, potentially enabling a Man-in-the-Middle MitM attac...

8.6CVSS6.2AI score0.00176EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2019-9689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - processcertificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero...

7.5CVSS7.1AI score0.01479EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-10013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of servic...

7.8CVSS7.3AI score0.0191EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-30575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowin...

7.5CVSS7AI score0.01007EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/07 10:21 p.m.26 views

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS6.3AI score0.00427EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/09/05 10:41 p.m.6 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.10 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.3 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/05 10:15 p.m.72 views

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS0.00427EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/09/05 9:59 p.m.62 views

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS0.00427EPSS
SaveExploits0References7
OSV
OSV
added 2025/09/05 9:59 p.m.27 views

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS6.3AI score
SaveExploits0References9
CVE
CVE
added 2025/09/05 9:59 p.m.43 views

CVE-2025-58369

CVE-2025-58369 affects fs2 (Scala) with fs2-io TLS on the JVM. The vulnerability exists in versions up to 2.5.12, 3.0.0-M1…3.12.2, and 3.13.0-M1…3.13.0-M6, where during TLS handshake a peer that shuts down write while the other side awaits data can spin the socket read, causing high CPU usage and...

5.3CVSS5.9AI score0.00427EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2025/09/05 8:58 p.m.17 views

FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side

Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...

5.3CVSS6.8AI score0.00427EPSS
SaveExploits0References10Affected Software11
Rows per page
Query Builder