127 matches found
new packages: cups-pk-helper
An update is available for cups-pk-helper. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
OSV-2021-494 Heap-buffer-overflow in AK::ByteBuffer::overwrite
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31698 Crash type: Heap-buffer-overflow READ 1 Crash state: AK::ByteBuffer::overwrite Crypto::PK::RSA::parsersakey FuzzRSAKeyParsing.cpp...
OSV-2021-394 Heap-buffer-overflow in Crypto::der_decode_sequence
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30906 Crash type: Heap-buffer-overflow READ 1 Crash state: Crypto::derdecodesequence Crypto::PK::RSA::parsersakey FuzzRSAKeyParsing.cpp...
monitoros (>=0.0.1, <=0.0.3), pk-app-pkgmgt (>=0.0.1, <=0.0.2) potentially affected by CVE-2020-7775 via freediskspace (0.1.2)
freediskspace NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on freediskspace and may be impacted: - monitoros =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-7775 Source advisory: SNYK:JS-FREEDISKSPACE-1040716...
vt-pk.de Cross Site Scripting vulnerability OBB-1349303
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
asmat-pk.com Cross Site Scripting vulnerability
Security Researcher Broly157 Helped patch 1569 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting asmat-pk.com website and its users. Following coordinated...
Downloads Resources over HTTP in pk-app-wonderbox
Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...
GHSA-FWHP-2HQR-6G72 Downloads Resources over HTTP in pk-app-wonderbox
Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...
Unspecified vulnerability in pk-app-wonderbox
pk-app-wonderbox is an app that integrates wonderbox and pillakloud. A security vulnerability exists in pk-app-wonderbox that originates when the program downloads an executable file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by intercepting the respons...
CVE-2016-10685
pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on...
CVE-2016-10685
pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on...
CVE-2016-10685
pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on...
CVE-2016-10685
CVE-2016-10685 affects pk-app-wonderbox, which downloads binary resources over HTTP, enabling MITM manipulation of requested resources. This can allow an attacker on the same network or with privileged network access to replace the binary with a malicious one, potentially causing remote code exec...
SSH / SSL RSA Private Key Passphrase Dictionary Enumerator Exploit
This is a script to perform SSH/SSL RSA private key passphrase enumeration with a dictionary attack. !/usr/bin/perl SSH/SSL RSA Private Key Passphrase dictionary enumerator Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg email protected$ ssh-keygen -...
pk-produkter.se XSS vulnerability
Open Bug Bounty ID: OBB-565582 Description| Value ---|--- Affected Website:| pk-produkter.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pk-sales.de XSS vulnerability
Open Bug Bounty ID: OBB-501076 Description| Value ---|--- Affected Website:| pk-sales.de Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...
pk-help.com XSS vulnerability
Open Bug Bounty ID: OBB-339729 Description| Value ---|--- Affected Website:| pk-help.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
webone cms news_con.php parameters of the pk-SQL injection vulnerability
No description provided by source...
Security update for mbedtls (important)
This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1...
Downloads Resources over HTTP
Overview Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...