CVE-2024-11946

iXsystems TrueNAS CORE fetchpluginpackagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This vulnerability allows network-adjacent attackers to tamper with firmware update files on affected installations of iXsystems TrueNAS devices. Authentication is not required to...

Re: [VSA0304] Half-Life Client remote hole via Adminmod plugin

Dear VOID.AT Security, This bug is not related to adminmod, but is rather the bug in Half Life itself. At least absolutely same problem is in amx plugin. amxpsay ssss causes same trouble. So this is a bug in HalfLife client and may be exploited by malicious server operator including remote one wi...