207 matches found
ssh_scan
sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...
AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782382498)
"The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782382498 advisory. - In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2...
Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782382498)
"The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782382498 advisory. - In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T...
CVE-2023-43154-PoC
CVE-2023-43154 - Macs Framework v1.1.4f CMS 타입 혼동 취약점 목차 1. 개요 2. 개념 증명 3. 기술 브리핑 4. 완화 대책 개요 CVE-ID : CVE-2023-43154 CVSS 3.1 : 9.8 취약점 설명 : isValidLogin 함수의 느슨한 비교로 인해 PHP 타입 혼동 취약점이 발생하며, 이를 악용하여 인증을 우회하고 관리자 계정을 탈취할 수 있습니다. 취약 매개변수 : CMS 사용자의 사용자 이름과 비밀번호. 영향을 받는 제품 : Macs Framework v1.14f -...
CVE-2023-45503
CVE-2023-45503 취약점 세부 정보 개요 Macrob7 Macs Framework Content Management SystemCMS 1.1.4f 및 이전 버전에서는 사용자 입력의 안전하지 않은 처리로 인해 16개의 SQL 인젝션 취약점이 발생합니다. 임의의 SQL 쿼리를 실행할 수 있게 되면 사용자 비밀번호 해시를 포함한 개인 데이터가 유출되고 다른 사용자의 자격 증명과 권한 수준을 수정할 수 있습니다. 그 영향에는 권한 상승과 잠재적 원격 코드 실행RCE이 포함될 수 있습니다. 각 영향받는 엔드포인트, 취약한 매개...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerabilities have been resolved: EFI: Do not import certificates from UEFI Secure Boot for T2 Macs. On Apple T2 Macs, when Linux attempts to read the db and dbx EFI variables during early boot to load UEFI Secure Boot certificates, a page fault occurs in the...
Linux Distros Unpatched Vulnerability : CVE-2026-6329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PKCS12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. Th...
CVE-2026-43172
A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability occurs during SMEM parsing if the firmware reports an invalid number of Logical Media Access Controllers LMACs, which can lead to an array overrun. This issue could potentially result in system instability or a denial of...
Gitea has insecure default SSH settings
Summary The built-in SSH server currently advertises a number of key exchange, MAC, and host key algorithms that are considered weak or broken. The defaults should be tightened so a fresh installation passes a baseline SSH security audit out of the box. Details Running ssh-audit against a default...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
EUVD-2026-15074
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue in Apple macOS affecting Intel-based Mac computers allows an application to potentially access user-sensitive data . The vulnerability was addressed by implementing additional code-signing restrictions . This issue is fixed in macOS Sequoia 15.7.5 , macOS Sonoma 14.8.5 , macOS T...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-1627
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic...
PT-2026-27551
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description A flaw exists in Intel-based Mac computers that could allow an application to access user-sensitive data. This issue wa...
PT-2026-5845
Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.13 Description The Edimax EW-7438RPn version 1.13 contains a cross-site request forgery issue in the MAC filtering configuration interface. An attacker can create malicious web pages to deceive users into adding...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000733)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000733 advisory. The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to...
