13502 matches found
Description of the security update for Office Online Server: August 8, 2023 (KB5002435)
None None...
Description of the security update for Publisher 2016: August 8, 2023 (KB5002462)
None None...
Type Confusion
gitlab is vulnerable to Type Confusion. The vulnerability allows an attacker to override an existing hash which leads into type confusion...
Out-of-bounds read when setting hmac data
...
UBUNTU-CVE-2023-4015
A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can lead unbinding the chain and objects be deactivate...
CVE-2023-3401
creationtimestamp| type| source ---|---|--- 2023-08-02 12:39:06+00:00| seen| https://t.me/cibsecurity/67566...
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE versions prior to 16.0.8, 16.1....
Moxa IKS, EDS Predictable From Observable State (CVE-2019-6563)
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
net ipv6 output_core.c has an information leak because of certain use of a hash
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...
net ipv4 route.c has an information leak because the hash table is very small
In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small. Impact: Successful exploitation of this vulnerability could lead to disclosure of sensitive information. Pro ducts Affected Brocade Fabric OS v9.0 and later...
Possibility of deadlock in libbpf function sock_hash_delete_elem
...
_getSelector does not return the right selector
Lines of code Vulnerability details Impact getSelector... function in the CoreVoting.sol will NEVER return the correct function selector of a calldata string. This can lead to malfunction in the system when creating a proposal. Proof of Concept The function selector is suppose to be the hash dige...
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the use of a password hash instead of a password for authentication. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows a malicious actor to compromise the...
EulerOS Virtualization 3.0.6.6 : libxml2 (EulerOS-SA-2023-2412)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...
kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...
kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...
Information Disclosure
github.com/kubeoperator/kubepi is vulnerable to Information Disclosure. The vulnerability exists because the password hash is not properly restricted to authenticated users which allows an attacker to gain access to sensitive information such as a password hash...
PT-2023-9331 · Unknown · Masterscada
Name of the Vulnerable Software and Affected Versions: MasterSCADA affected versions not specified Description: The issue is related to insufficient protection of service data in the MasterSCADA SCADA system. Exploitation of this issue may allow an attacker to gain unauthorized access to the...
Design/Logic Flaw
KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user including admin. A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users...
KubePi may leak password hash of any user
Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password of any user including admin. This leads to password crack attack PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview Impact - Leaking confidential information. - Can lead to password...