Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/04/16 12:0 a.m.5 views

Luanti 安全漏洞

Luanti is an open-source voxel game engine developed by Luanti itself, supporting mods and game creation. Versions of Luanti prior to 5.5.2 contained security vulnerabilities. These vulnerabilities were caused by improper security environment configuration, which could allow custom modules to...

8.1CVSS5.8AI score0.00006EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:24 a.m.3 views

CVE-2023-43644

Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to...

9.8CVSS7AI score0.00174EPSS
Exploits0
OSV
OSV
added 2023/09/26 7:35 p.m.27 views

GHSA-R5HM-MP3J-285G sing-box vulnerable to improper authentication in the SOCKS inbound

Impact This vulnerability allows specially crafted requests to bypass authentication, affecting all SOCKS inbounds with user authentication. Patches Update to sing-box 1.4.5 or 1.5.0-rc.5 and later versions. Workarounds Don't expose the SOCKS5 inbound to insecure environments...

9.1CVSS9.4AI score0.00174EPSS
Exploits0References6
Prion
Prion
added 2023/09/25 8:15 p.m.15 views

Authentication flaw

Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to...

7.5CVSS9.5AI score0.00174EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/25 7:12 p.m.18 views

CVE-2023-43644 Improper authentication in the SOCKS5 inbound in sing-box

Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to...

9.1CVSS9.6AI score0.00174EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/25 7:12 p.m.12 views

CVE-2023-43644 Improper authentication in the SOCKS5 inbound in sing-box

Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to...

9.1CVSS9.8AI score0.00174EPSS
Exploits0References1
Rows per page
Query Builder