CVE-2024-21305

Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...

CVE-2024-20652

Windows HTML Platforms Security Feature Bypass Vulnerability...

Security feature bypass

Windows Server Key Distribution Service Security Feature Bypass...

CVE-2024-20674 Windows Kerberos Security Feature Bypass Vulnerability

...

CVE-2024-20666 BitLocker Security Feature Bypass Vulnerability

...

Mageia: Security Advisory (MGASA-2024-0002)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-1080 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the Hypervisor-Protected Code Integrity HVCI feature of the Windows operating system. This vulnerability allows attackers ...

@fastify/reply-from JSON Content-Type parsing confusion

Impact The main repo of fastify use fast-content-type-parse to parse request Content-Type, which will trim after split. The fastify-reply-from have not use this repo to unify the parse of Content-Type, which won't trim. As a result, a reverse proxy server built with @fastify/reply-from could...

GHSA-V2V2-HPH8-Q5XP @fastify/reply-from JSON Content-Type parsing confusion

Impact The main repo of fastify use fast-content-type-parse to parse request Content-Type, which will trim after split. The fastify-reply-from have not use this repo to unify the parse of Content-Type, which won't trim. As a result, a reverse proxy server built with @fastify/reply-from could...

CVE-2023-51701

CVE-2023-51701 affects fastify-reply-from, a Fastify plugin. The vulnerability arises when the plugin misinterprets the request body due to a Content-Type handling discrepancy (Content-Type header like application/json ; charset=utf-8), allowing bypass of security checks. References in multiple s...

CVE-2023-51701 @fastify-reply-from JSON Content-Type parsing confusion

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with @fastify/reply-from could misinterpret the incoming body by passing an header ContentType: application/json ; charset=utf-8. This can lead to bypass of security checks...

Fastify Environmental Vulnerabilities

Fastify is an open source web framework for Node.js from the OpenJS Foundation. A security vulnerability exists in Fastify fastify-reply-from versions prior to 9.6.0, which stems from the fact that passing body text via header using fastify/reply-from may be misinterpreted, leading to bypassing...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security bypass vulnerability, which is caused by a vulnerability in API privilege validation in the DownloadProviderMain...

SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails

A new exploitation technique called Simple Mail Transfer Protocol SMTP smuggling can be weaponized by threat actors to send spoofed emails with fake sender addresses while bypassing security measures. "Threat actors could abuse vulnerable SMTP servers worldwide to send malicious emails from...

Vulnerabilities fixed in Apache OpenOffice

Apache has fixed vulnerabilities in OpenOffice. A malicious party can exploit the vulnerabilities to execute arbitrary code execute arbitrary code in the context of the application, with permissions from the victim, or to bypass a security measure. Apache has released updates to fix the...

The vulnerability of the scanning function of SSL/TLS-protocol-based antivirus software from ESET, including ESET NOD32, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Endpoint Antivirus for Linux, ESET Server Security for Windows Server (File Security for Microsoft Windows Server), ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure, and ESET Server Security for Linux, allows attackers to bypass the security measures.

The vulnerability of the scanning function of SSL/TLS-protection in ESET NOD32 antivirus software, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Endpoint Antivirus for Linux, ESET Server...

KLA73522 SB vulnerability in WinSCP

Security bypass vulnerability was found in WinSCP. Malicious users can remotely exploit this vulnerability to bypass security restrictions. Original advisories Changes in WinSCP 6.2.2 Exploitation Public exploits exist for this vulnerability. Related products WinSCP CVE list CVE-2023-48795 high...

CVE-2023-47100

A flaw was found in Perl due to improper handling of the property name by the Sparseunipropstring function in regcomp.c. This issue could allow an attacker to to bypass security restrictions and use a specially crafted regular expression input to write to unallocated space...

The vulnerability of Microsoft Edge browsers lies in the lack of tag blocking during website loading, which allows attackers to circumvent security restrictions.

The vulnerability of Microsoft Edge relates to the absence of tag blocking during website loading. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by loading malicious web pages or files...

The vulnerability in the isolated iframe environment of Mozilla Firefox allows a perpetrator to circumvent existing security restrictions.

The vulnerability in the isolated iframe environment of Mozilla Firefox is related to data interpretation errors. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions...