50 matches found
EUVD-2000-0007
Malware in sbrugna...
EUVD-2024-46893
Malicious code in bioql PyPI...
CVE-2023-33066
Memory corruption in Audio while processing RT proxy port register driver...
Coder Code-Server 安全漏洞
Coder Code-Server is a product developed based on Microsoft's open-source Visual Studio Code by Coder, Inc. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in Coder Code-Server versions prior to 4.99.4 that stems from not proper...
CVE-2024-5732
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2024-47857: Improper Input Validation
SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX "account A" to impersonate another existing PrivX "account B" and gain access to SSH target host...
SSH PrivX 安全漏洞
SSH PrivX is a scalable, cost-effective and highly automated privileged access management PAM solution from SSH. A security vulnerability exists in SSH PrivX versions 18.0 through 36.0 that stems from insufficient validation of public key signatures during a native SSH connection using a proxy po...
CVE-2024-43385
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXYHTTPPORT in mGuard devices...
CVE-2024-5732
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2024-5732
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2024-5732 Clash Proxy Port improper authentication
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2024-5732
CVE-2024-5732 concerns Clash (Windows) up to version 0.20.1, where the Proxy Port component contains unknown code that enables improper authentication. The vulnerability can be exploited remotely over the network, and the exploit has been disclosed publicly. Multiple sources (NVD/NVD-affiliate en...
CVE-2024-5732 Clash Proxy Port improper authentication
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
Clash Authorization Issue Vulnerability
Clash is a multi-platform proxy client developed in the Go language by the individual developers at Dreamacro. An authorization issue vulnerability exists in Clash 0.20.1 and earlier versions, which stems from the component Proxy Port. contains unknown code that could lead to improper...
PT-2024-37108
Name of the Vulnerable Software and Affected Versions: Clash versions up to 0.20.1 Description: A critical issue affects the Proxy Port component, leading to improper authentication. The attack can be initiated remotely. It is recommended to change the configuration settings. Recommendations: For...
CVE-2024-5732: Improper Authentication
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
Memory corruption
Memory corruption in Audio while processing RT proxy port register driver...
CVE-2023-33066 Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while processing RT proxy port register driver...
CVE-2023-33066
CVE-2023-33066 describes a memory corruption in the Audio component of Qualcomm’s closed‑source stack, triggered while processing the RT proxy port register driver. The issue is linked to an out-of-range pointer offset in Audio (per VulnEnrichment), with Qualcomm’s March 2024 product-security bul...