Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.3 views

CVE-2020-10539

An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort function that, upon user login, checks the submitted password against the user password's MD5 hash stored in the database. It is also compared to a second MD5 hash, which is the same for every user aka a...

9.8CVSS6.9AI score0.00377EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.1 views

CVE-2023-45842

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the mxsldr...

8.1CVSS7.3AI score0.00089EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-50109

Malicious code in bioql PyPI...

8.1CVSS8.3AI score0.00089EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:21 a.m.9 views

CVE-2023-45839

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

8.1CVSS7.3AI score0.00089EPSS
Exploits1References1
OSV
OSV
added 2023/12/05 12:15 p.m.19 views

CVE-2023-45839

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

8.1CVSS7.2AI score
Exploits0References3
OSV
OSV
added 2023/12/05 12:15 p.m.19 views

CVE-2023-45841

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

8.1CVSS7.2AI score
Exploits0References3
Prion
Prion
added 2023/12/05 12:15 p.m.19 views

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the mxsldr...

5.1CVSS7.5AI score0.00089EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/12/05 12:15 p.m.14 views

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

5.1CVSS7.5AI score0.00089EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/12/05 11:30 a.m.44 views

CVE-2023-45839

CVE-2023-45839 concerns Buildroot (2023.08.1 and dev commit 622698d7847) with multiple data-integrity vulnerabilities in the package hash checking, related to aufs-util. Talos confirms Buildroot is susceptible to MITM-based tampering of downloaded sources (no hash/check for certain packages), ena...

8.1CVSS8.3AI score0.00089EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/05 11:30 a.m.18 views

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

8.1CVSS8.5AI score0.00089EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/12/05 11:30 a.m.18 views

CVE-2023-45839

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

8.1CVSS8.5AI score0.00089EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.4 views

Buildroot Security Vulnerabilities

Buildroot is Buildroot open source set of Makefile and Patch files. It is used to simplify and automate the process of building a complete and bootable Linux environment for embedded systems. A security vulnerability exists in Buildroot version 2023.08.1 and dev commit 622698d7847, which stems fr...

8.1CVSS8.4AI score0.00122EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.2 views

Buildroot Security Vulnerabilities

Buildroot is Buildroot open source set of Makefile and Patch files. It is used to simplify and automate the process of building a complete and bootable Linux environment for embedded systems. A security vulnerability exists in Buildroot version 2023.08.1 and dev commit 622698d7847, which stems fr...

8.1CVSS8.4AI score0.00089EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.2 views

Buildroot Security Vulnerabilities

Buildroot is Buildroot open source set of Makefile and Patch files. It is used to simplify and automate the process of building a complete and bootable Linux environment for embedded systems. A security vulnerability exists in Buildroot version 2023.08.1 and dev commit 622698d7847, which stems fr...

8.1CVSS8.4AI score0.00089EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/12/05 12:0 a.m.3 views

PT-2023-7916 · Buildroot +1 · Buildroot +1

Name of the Vulnerable Software and Affected Versions: Buildroot versions 2023.08.1 through dev commit 622698d7847 Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality. A specially crafted man-in-the-middle attack can lead to arbitrary command...

8.1CVSS8.2AI score0.00122EPSS
Exploits1References15
0day.today
0day.today
added 2012/06/16 12:0 a.m.38 views

WeGame Code Execution/Credential stealing Exploit

Exploit for php platform in category web applications ---------------------------------------------------------------------- 888 .d8888b. 888 d88P Y88b 888 .d88P .d8888b .d88b. 88888b.d88b. 88888b. 888 8888" 888 888 d88P" d88""88b 888 "888 "88b 888 "88b 888 "Y8b. Y8bd8P' 888 888 888 888 888 888 8...

7.1AI score
Exploits0
Rows per page
Query Builder