RHSA-2025:0714

creationtimestamp| type| source ---|---|--- 2025-01-29 10:10:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3368 2025-02-26 14:25:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5493...

RHSA-2024:1750

creationtimestamp| type| source ---|---|--- 2025-01-24 06:12:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2874 2025-01-31 01:12:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3545...

RHSA-2024:3352

creationtimestamp| type| source ---|---|--- 2025-01-13 09:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1356 2025-05-12 23:29:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16071...

RHEL 9 : kernel-rt (RHSA-2024:8614)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8614 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHSA-2024:1249

creationtimestamp| type| source ---|---|--- 2024-03-13 16:22:10+00:00| seen| https://t.me/ctinow/206854...

RHSA-2015:1194

creationtimestamp| type| source ---|---|--- 2024-02-23 22:51:18+00:00| seen| https://t.me/ctinow/192256...

RHSA-2024:0807

creationtimestamp| type| source ---|---|--- 2024-02-13 20:16:45+00:00| seen| https://t.me/ctinow/184126...

RHSA-2024:0752

creationtimestamp| type| source ---|---|--- 2024-02-08 19:22:06+00:00| seen| https://t.me/ctinow/181561...

RHSA-2024:0756

creationtimestamp| type| source ---|---|--- 2024-02-08 19:22:04+00:00| seen| https://t.me/ctinow/181559...

RHSA-2019:2060

creationtimestamp| type| source ---|---|--- 2024-02-01 16:41:50+00:00| seen| https://t.me/ctinow/177666...

HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...

RHSA-2021:2303

creationtimestamp| type| source ---|---|--- 2021-06-10 02:57:54+00:00| published-proof-of-concept| Telegram/OphBtcFHpzsAaaPBsn-6jMA-guExzs3Tjx94NVn8zTfkHs...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2020-1512)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1512 advisory. 1:1.8.0.252.b09-2 - Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz1810557 1:1.8.0.252.b09-1 - Make use of...

Security Bulletin: IBM Information Server on Cloud is affected by the vulnerabilities known as Spectre and Meltdown.

Summary IBM Information Server on Cloud is affected by the vulnerabilities known as Spectre and Meltdown, which can enable CPU data cache timing to be abused to bypass conventional memory security restrictions to gain access to privileged memory that should be inaccessible. Vulnerability Details...

Vulnerability Databases: Classification and Registry

What publicly available Vulnerability Databases do we have? Well, I can only say that there are a lot of them and they are pretty different. Here I make an attempt to classify them. It's quite an ungrateful task. No matter how hard you try, the final result will be rather inaccurate and incomplet...

Linux Kernel Vulnerability

US-CERT is aware of a Linux kernel vulnerability affecting Linux PCs and servers and Android-based devices. Exploitation of this vulnerability may allow an attacker to take control of an affected system. US-CERT recommends that users and administrators review the Redhat Security Blog and the Debi...

Bourne-Again Shell (Bash) Remote Code Execution Vulnerability

US-CERT is aware of a Bash vulnerability affecting Unix-based operating systems such as Linux and Mac OS X. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code on an affected system. US-CERT recommends users and administrators review TA14-268A, Vulnerability...

DHCP Client Bash Environment Variable Code Injection (Shellshock)

This module exploits the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This module targets dhclient by responding to DHCP requests with a malicious hostname, domainname, and URL which are then passed to the configuration scripts as environment...

JBoss Enterprise Portal Platform GateIn Portal Security Update (RHSA-2013-0613)

Binary data redhat-RHSA-2013-0613.nbin...

RedHat Security Advisory RHSA-2009:1680

The remote host is missing updates announced in advisory RHSA-2009:1680. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in Xpdf's Type 1 font parser. A specially-crafted PDF file with an...