154 matches found
CVE-2024-51378
CVE-2024-51378 — Zusammenfassung, Maßnahmen und Dokumentation Sicheres Repository ⚠️ Ethik- und Rechtshinweis Sämtliches Material in diesem Repository dient ausschließlich zu Bildungszwecken, zur legitimen Sicherheitsforschung und zum Testen in Umgebungen, die Ihnen gehören oder für die Sie eine...
CVE-2026-44725
In EMQX versions prior to 5.8.11, 5.9.3, 5.10.4, 6.0.3, 6.1.2, and 6.2.1, missing five-minute grant lifetime and SHA-256 package binding let a compromised admin/API key upload attacker-controlled Erlang code via POST /api/v5/plugins/install, achieving remote code execution. Patched in all listed ...
OESA-2026-3005 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...
Fedora 43 : perl-Crypt-DSA (2026-b77b9c5f04)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b77b9c5f04 advisory. This update, to the current upstream release, addresses a cryptographic flaw modulo bias in key generation that could lead to private key compromise...
PT-2026-49531
Name of the Vulnerable Software and Affected Versions Crypt::DSA versions prior to 1.21 Description The software reuses the nonce across signatures, which can lead to the recovery of the private key. The sign function in the Crypt::DSA::sign module caches the per-signature nonce material within t...
Astra Linux – Vulnerability in Thunderbird
When importing a revoked key with “key compromise” as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked. As a result, the existing key remained unrevoked. Revocation statements that used another revocation reason, or those that did not specify...
PT-2026-36003
Name of the Vulnerable Software and Affected Versions wget2 affected versions not specified Description An issue exists where the software accepts server certificates with incorrect Key Usage KU or Extended Key Usage EKU. This could allow an attacker who has compromised a certificate and its...
CVE-2026-3503
Protection mechanism failure in wolfCrypt post-quantum implementations ML-KEM and ML-DSA in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during...
EUVD-2020-17547
Malware in sbrugna...
EUVD-2018-0717
Malware in sbrugna...
EUVD-2017-1552
Malware in sbrugna...
EUVD-2017-0111
Malware in sbrugna...
EUVD-2015-9101
Malware in sbrugna...
EUVD-2015-8816
Malware in sbrugna...
EUVD-2019-5541
Malware in sbrugna...
EUVD-2005-2644
Malware in sbrugna...
EUVD-2024-3394
Malicious code in bioql PyPI...
EUVD-2023-33710
Malicious code in bioql PyPI...