8 matches found
CVE-2025-32433
Erlang/OTP SSH CVE-2025-32433 に関するセキュリティ研究 Python エクスプロイト Proof-of-Concept CVE-2025-32433 Erlang/OTP SSH における未認証リモートコード実行。また、バナー取得用 Nuclei テンプレート と Nuclei RCE チェックも用意しています。 Suricata と Zeek IDS のログは、成功した Paramiko 攻撃、通常の OpenSSH9.8 接続（攻撃なし）2回、ProDefense/CVE-2025-32433 を使用した成功した攻撃2回、および...
UBUNTU-CVE-2024-41050
In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of msgid to avoid reuse Reusing the msgid after a maliciously completed reopen request may cause a read request to remain unprocessed and result in a hung, as shown below: t1 | t2 | t3...
PT-2024-29248
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue prevents malicious processes from completing random copen/cread requests and crashing the system. Added checks include: Generic, copen can only complete open requests, and crea...
VulnCheck KEV: CVE-2010-4598
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...
CVE-2013-5054
Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...
Design/Logic Flaw
Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...
