Lucene search
K

192 matches found

OSV
OSV
added 2025/10/03 8:15 p.m.0 views

UBUNTU-CVE-2025-49844

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.2AI score0.11111EPSS
Exploits13References12
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-23426

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00602EPSS
Exploits0References1
OSV
OSV
added 2025/10/03 7:15 p.m.2 views

ALPINE-CVE-2025-46819

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

7.1CVSS8.6AI score0.08765EPSS
Exploits0References1
Gitee
Gitee
added 2025/09/06 12:43 p.m.81 views

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This repository contains Nmap NSE Network Sniffer Engine scripts designed to check for log4shell or LogJam vulnerabilities CVE-2021-44228 in various services. The scripts are written in Lua and are intended to be used with the Nmap network scanning tool. The scripts are categorized into different...

10CVSS7.4AI score0.94358EPSS
Exploits341
The Hacker News
The Hacker News
added 2025/08/27 5:7 p.m.4 views

Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model

Cybersecurity company ESET has disclosed that it discovered an artificial intelligence AI-powered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in real-tim...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-46981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage...

9.8CVSS7AI score0.80733EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:58 a.m.1 views

CVE-2023-1143

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code...

8.8CVSS7.3AI score0.00602EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.6 views

Alibaba Cloud Linux 3 : 0157: redis:6 (ALINUX3-SA-2023:0157)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0157 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-29477: Redis is an open source BS...

8.8CVSS7.3AI score0.04319EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2025/03/06 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-7321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.2AI score0.80733EPSS
Exploits2References2
OSV
OSV
added 2025/03/05 2:35 p.m.0 views

USN-7321-1 redis vulnerabilities

It was discovered that Redis incorrectly handled certain memory operations during pattern matching. An attacker could possibly use this issue to cause a denial of service. CVE-2024-31228 It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. An attacker could...

9.8CVSS6.9AI score0.80733EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.17 views

Azure Linux 3.0 Security Update: redis / valkey (CVE-2024-46981)

The version of redis / valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46981 advisory. - Redis is an open source, in-memory database that persists on disk. An authenticated user May use a...

9.8CVSS7.3AI score0.80733EPSS
Exploits2References2
RedHat Linux
RedHat Linux
added 2025/01/27 1:43 a.m.4 views

redis: Redis' Lua library commands may lead to remote code execution

A flaw was found in the Redis server. This flaw allows an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, potentially leading to remote code execution...

9.8CVSS7.7AI score0.80733EPSS
Exploits2References8
Tenable Nessus
Tenable Nessus
added 2025/01/24 12:0 a.m.21 views

Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2025-818)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-818 advisory. Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code...

9.8CVSS7.3AI score0.80733EPSS
Exploits2References4
Amazon
Amazon
added 2025/01/24 12:0 a.m.2 views

Important: redis6

Issue Overview: Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional...

7CVSS7.6AI score0.80733EPSS
Exploits2
Amazon
Amazon
added 2025/01/24 12:0 a.m.1 views

Important: redis

Issue Overview: Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional...

9.8CVSS7.9AI score0.80733EPSS
Exploits2
RedHat Linux
RedHat Linux
added 2025/01/21 9:19 p.m.3 views

redis: Redis' Lua library commands may lead to remote code execution

A flaw was found in the Redis server. This flaw allows an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, potentially leading to remote code execution...

9.8CVSS7.7AI score0.80733EPSS
Exploits2References8
RedHat Linux
RedHat Linux
added 2025/01/20 1:19 a.m.2 views

redis: Redis' Lua library commands may lead to remote code execution

A flaw was found in the Redis server. This flaw allows an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, potentially leading to remote code execution...

9.8CVSS7.7AI score0.80733EPSS
Exploits2References8
RedHat Linux
RedHat Linux
added 2025/01/20 1:18 a.m.2 views

redis: Redis' Lua library commands may lead to remote code execution

A flaw was found in the Redis server. This flaw allows an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, potentially leading to remote code execution...

9.8CVSS7.7AI score0.80733EPSS
Exploits2References8
SUSE Linux
SUSE Linux
added 2025/01/17 2:40 p.m.2 views

Security update for redis

This update for redis fixes the following issues: CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. bsc1235386 CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution...

8.8CVSS7AI score0.80733EPSS
Exploits2References8
SUSE Linux
SUSE Linux
added 2025/01/17 2:39 p.m.3 views

Security update for redis

This update for redis fixes the following issues: CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. bsc1235387 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.8CVSS8AI score0.80733EPSS
Exploits2References4
Rows per page
Query Builder