15 matches found
CVE-2026-14759
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...
Use of Weak Hash
Overview Affected versions of this package are vulnerable to Use of Weak Hash via the grantee ID hashing logic. An attacker can make two different RBAC grantee records map to the same truncated identifier by creating or renaming roles and collections whose metadata is hashed into the 16-hex...
CLSA-2026-1776343034 haproxy: Fix of CVE-2023-45539
CVE-2023-45539: reject '' as part of the URI to prevent ACL bypass via pathend rules...
EUVD-2025-205425
A vulnerability was identified in simstudioai sim up to 0.5.27. This vulnerability affects unknown code of the file apps/sim/lib/auth/internal.ts of the component CRON Secret Handler. The manipulation of the argument INTERNALAPISECRET leads to improper authentication. It is possible to initiate t...
EUVD-2017-9243
Malware in sbrugna...
CVE-2022-21198
creationtimestamp| type| source ---|---|--- 2025-02-06 02:41:39+00:00| seen| Telegram/xbf7RgubljmZeKAr0HL-VoweeZFB4txvAuNL25GKBYMSo96 2025-02-06 02:42:29+00:00| seen| Telegram/P6rbDOAjZ9dWxxqEqqfp9RCvkW7JTg1or85lYTIwDepCc6U...
CVE-2024-56522
An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != aka loose comparison and does not use a constant-time function to compare TCPDF tag hashes...
CVE-2024-38815
creationtimestamp| type| source ---|---|--- 2024-10-09 23:11:23+00:00| seen| https://t.me/cvedetector/7535...
USN-6530-2 haproxy vulnerability
Seth Manesse and Paul Plasil discovered that HAProxy incorrectly handled URI components containing the hash character . A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain pathend rules...
RHSA-2024:0582
creationtimestamp| type| source ---|---|--- 2024-01-30 14:21:38+00:00| seen| https://t.me/ctinow/175917...
CVE-2023-22805
creationtimestamp| type| source ---|---|--- 2023-02-15 20:46:42+00:00| seen| https://t.me/cibsecurity/58251...
CVE-2022-28571
creationtimestamp| type| source ---|---|--- 2022-05-02 16:27:54+00:00| seen| https://t.me/cibsecurity/41719...
CVE-2018-17771
creationtimestamp| type| source ---|---|--- 2020-09-09 22:55:34+00:00| seen| https://t.me/cibsecurity/14572...
Authentication flaw
The identifierhash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifierhash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain...
CVE-2017-18106
The identifierhash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifierhash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain...