cve-2022-32223

CVE-2022-32223 Archivos fuente para generar un exploit de demostración de CVE-2022-32223: Node.js es vulnerable a la desviación del flujo de ejecución: secuestro de DLL bajo ciertas condiciones en plataformas Windows. Esta vulnerabilidad puede ser explotada si la víctima tiene las siguientes...

CVE-2026-41940-Security-Patch

CVE-2026-41940-Security-Patch Misure di correzione temporanee non ufficiali per la vulnerabilità CVE-2026-41940 Possono essere utilizzate per una difesa temporanea Se le condizioni lo consentono, aggiorna il prima possibile alla versione ufficiale Avviso di sicurezza cPanel:...

CVE-2026-77131

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

CVE-2026-77131

CVE-2026-77131 affects the TYPO3 extension SYSSY – TYPO3 Monitoring & Security Checks (syssy). When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it, resulting in a cleartext transmission of sensitive data. Exploitation r...

EUVD-2022-53424

Malicious code in bioql PyPI...

EUVD-2022-33842

Malicious code in bioql PyPI...

CVE-2022-29505

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation...

LINE for Windows 安全漏洞

LINE for Windows is a Windows-based instant messaging application from Japanese company LINE. A security vulnerability exists in LINE prior to version 7.8, which stems from a build error in the openssl dependency, making LINE for Windows prior to 7.8 vulnerable to DLL injection that could lead to...

SUSE-SU-2022:0935-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: Update to 12.22.11, which adjusts dependencies for openssl sources to 1.1.1n. Addressing the following issue in openssl: - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877...

Vulnerabilities fixed in Node.js

Vulnerabilities have been fixed in Node.js. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure The vulnerability with attribute CVE-2020-1971 can only be exploited be exploited...

FreeBSD : Gitlab -- Multiple Vulnerabilities (570706ff-7ee0-11ea-bd0b-001b217b3468)

Gitlab reports : NuGet Package and File Disclosure through GitLab Workhorse Job Artifact Uploads and File Disclosure through GitLab Workhorse Incorrect membership following group removal Logging of Praefect tokens Update Rack dependency Update OpenSSL dependency C Tenable Network Security, Inc. T...

UBUNTU-CVE-2020-7042

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted only a malformed certificate may be accepted...

openSUSE Security Update : git (openSUSE-2020-123)

This update for git fixes the following issues : Security issues fixed : - CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice bsc1158787. - CVE-2019-19604: Fixed a recursive clone...