140 matches found
citrixmash_scanner
CVE-2019-19781 citrixmash 스캐너 CVE-2019-19781에 취약한 Citrix 어플라이언스를 위한 멀티스레드 스캐너입니다. 이 스캐너는 호스트를 손상시키거나 악용하려 시도하지 않으며, 민감한 콘텐츠를 다운로드하지 않습니다. 대상이 취약한지 확인하기 위해 HEAD 요청을 사용합니다. content-length 헤더 응답에서 특정 값을 검증하여 오탐false positive을 줄입니다. citrixsmashscanner는 네트워크 범위와 개별 호스트를 모두 입력으로 받을 수 있습니다. 설치 $ go get ...
EUVD-2026-55506
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsecdodecryptauth computes the associated-data length for the AEAD request as assoclen += datalen - authlen; where datalen is the number of bytes after the MAC...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the ALSA usb-audio library’s convertchmapv3 function not verifying the csdesc-wLength value,...
GnuTLS 安全漏洞
GnuTLS is an open-source, free security communication library developed by GnuTLS that enables the implementation of SSL, TLS, and DTLS protocols. GnuTLS has a security vulnerability, which stems from the mergehandshakepacket function in the DTLS handshake reassembly logic not verifying the...
Google Go 安全漏洞
Google Go is a static, strongly typed, compiled, concurrent programming language with garbage collection features from the American company Google. There is a security vulnerability in Google Go, which stems from the failure to correctly verify the length of fields, potentially leading to crashes...
GStreamer 安全漏洞
GStreamer is an open-source framework for processing streaming media. GStreamer has a security vulnerability that stems from the lack of verification of the data length provided to users when processing stream headers in ASF files. This vulnerability may lead to heap buffer overflows and remote...
GIMP security vulnerabilities
GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability that stems from the lack of verification of the data length provided by users during the parsing of PSP files. This vulnerability may lead to heap buffer overflows and remote code execution...
CVE-2025-55081
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the nxsecuretlsprocessclienthello function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside o...
Linux Distros Unpatched Vulnerability : CVE-2023-53575
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...
EUVD-2021-14888
Malware in sbrugna...
EUVD-2015-8453
Malware in sbrugna...
CVE-2023-53575
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...
CVE-2023-53575
In CVE-2023-53575, the Linux kernel wifi driver (iwlwifi, mvm) fixes a potential array out-of-bounds access by accounting for IWL_SEC_WEP_KEY_OFFSET when verifying key_len in iwl_mvm_sec_key_add(). The fix is implemented in the kernel code referenced in the stable commits: https://git.kernel.org/...
CVE-2023-53575 wifi: iwlwifi: mvm: fix potential array out of bounds access
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...
EUVD-2024-53615
Malicious code in bioql PyPI...
EUVD-2022-50998
Malicious code in bioql PyPI...
EUVD-2023-41160
Malicious code in bioql PyPI...
EUVD-2024-53613
Malicious code in bioql PyPI...