GHSA-HWRM-63V2-42G4 Ansible Leaks Data Passed to ssh-keygen

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

Ansible Leaks Data Passed to ssh-keygen

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

Design/Logic Flaw

ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. ecdsaverifypreparelegacy does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple...

gnutls security update

3.6.16-4.0.1fips - Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length as defined in FIPS 186-4 section B.3.2 Orabug: 33200526 - Allow bigger known RSA modulus sizes when calling rsageneratefips1864keypair directly Orabug: 33200526 - Change Epoch from 1 to 10...

openssh security update

8.0p1-10 - sshd -T requires -C when 'Match' is used in sshdconfig 1836277 8.0p1-9 - CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation 1882252 - Hostbased ssh authentication fails if session ID contains a '/' 1944125 8.0p1-8 - ssh doesnt...

NTPd < 4.2.8p2, 4.3.x < 4.3.12 Keygen Vulnerability

NTPd is prone to a vulnerability in ntp-keygen. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription...

GHSA-399H-CMVP-QGX5 Incorrect Default Permissions in Binance tss-lib

The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties. Specific Go Packages Affected github.com/binance-chain/tss-lib/ecdsa/keygen...

Incorrect Default Permissions in Binance tss-lib

The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties. Specific Go Packages Affected github.com/binance-chain/tss-lib/ecdsa/keygen...

Remote Command Execution

reg-keygen-git-hash-plugin is vulnerable to remote command execution. An attacker is able to inject and execute arbitrary OS commands via various functions in git-cmd-client.ts...

reg-notify-github-plugin (>=0.0.18 <=0.0.20) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17 <=0.0.19)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.0.18, =0.0.20 Source cves: CVE-2021-32673 Source advisory: OSV:GHSA-49Q3-8867-5WMP...

Remote Command Execution in reg-keygen-git-hash-plugin

Impact reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands. Patches Upgrade to version 0.10.16 or later. For more information If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit...

GHSA-49Q3-8867-5WMP Remote Command Execution in reg-keygen-git-hash-plugin

Impact reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands. Patches Upgrade to version 0.10.16 or later. For more information If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit...

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

CVE-2021-32673

CVE-2021-32673 affects the reg-keygen-git-hash-plugin (part of reg-suit). The vulnerable versions are up to and including 0.10.15, which allow a remote attacker to execute arbitrary commands. The recommended remediations are to upgrade to version 0.10.16 or later. Multiple connected sources (NVD,...

CVE-2021-32673 Remote Command Execution in reg-keygen-git-hash-plugin

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

CopperStealer malware stealing Facebook, Apple, Google passwords

By Waqas The credential-stealing malware was found in keygen and Cracks' website to circumvent licensing restrictions to legit software. This is a post from HackRead.com Read the original post: CopperStealer malware stealing Facebook, Apple, Google passwords...

CopperStealer Malware Targets Facebook and Instagram Business Accounts

A malware that until now has gone undocumented has been quietly hijacking online accounts of advertisers and users of Facebook, Apple, Amazon, Google and other web giants since July 2019 and then using them for nefarious activity, researchers have found. Dubbed CopperStealer, the malware acts...

Security update for bind (important)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2021:0386-1 Rating: important References: 1180933 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for bind fixes the following issues: -...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:0689-1)

This update for bind fixes the following issues : dnssec-keygen can no longer generate HMAC keys. Use tsig-keygen instead. bsc1180933 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-SU-2021:0689-1 Security update for bind

This update for bind fixes the following issues: - dnssec-keygen can no longer generate HMAC keys. Use tsig-keygen instead. bsc1180933...