Apache HTTP Server 安全漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. Apache HTTP Server suffers from a server-side request forgery vulnerability that can be exploited by an attacker to disclose NTML...

Envoy Security Vulnerabilities

Envoy is an open source distributed proxy server. A security vulnerability exists in Envoy versions prior to 1.30.4, 1.29.7, 1.28.5, and 1.27.7, which stems from a reference to memory that has been freed when using the cookie attribute when configuring a routing hash policy, resulting in the...

bpf: Fix DEVMAP_HASH overflow check on 32-bit arches

...

EulerOS 2.0 SP12 : dnsmasq (EulerOS-SA-2024-1865)

According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Closest Encloser Proof aspect of the DNS protocol in RFC 5155 when RFC 9276 guidance is skipped allows remote attackers to cause a denial of...

The vulnerability of the virtio-net server interface of QEMU allows a attacker to trigger a information leak.

The vulnerability of the virtio-net server QEMU interface is related to the TX cleanup function in the virtionetFlushTx function. This vulnerability occurs when the guest functions VIRTIONETFHASHREPORT, VIRTIOFVERSION1, and VIRTIONETFMRGRXBUF are enabled. Exploiting this vulnerability can allow a...

CVE-2024-5565

creationtimestamp| type| source ---|---|--- 2024-06-27 11:34:54+00:00| seen| Telegram/ZsbHSuDV48H-a1ELq9wdg6d2vdMfxqBSJBQ7Z887p2osX8 2024-06-27 11:58:09+00:00| seen| https://t.me/thehackernews/5179 2024-06-27 12:00:06+00:00| seen| https://t.me/KomunitiSiber/2171 2024-06-27 12:07:46+00:00|...

Malicious code in active-model_serializers-hash_wrapper (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-hash-like (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6399 Malicious code in active-hash-like (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaaոderen.Bаsisregisters.Utilities.HashCodeCalculator (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bе.Vlaaոderen.Bаsisregisters.Utilіties.HashCodeCalculator (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in random_hash_halisi (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in null_hash_grab_decode (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2775 Malicious code in null_hash_grab_decode (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2024-38662

In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a mapdelete on a...

CVE-2024-33881

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter...

CVE-2024-33881

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter...

CVE-2024-24554 Bludit - Insecure Token Generation

Bludit uses predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens such as the API token and the user token. This allows attackers to authenticate against the Bludit API...

CVE-2024-33881

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter...

PT-2024-20446

Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description The issue concerns the use of predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens, such as the API token and the user token. This allows attackers to...