Lucene search
+L

16129 matches found

RedHat Linux
RedHat Linux
added 2022/11/08 9:43 a.m.17 views

golang: crash in a golang.org/x/crypto/ssh server

A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability...

7.5CVSS6.8AI score0.03931EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/11/08 9:27 a.m.15 views

golang: crash in a golang.org/x/crypto/ssh server

A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability...

7.5CVSS6.8AI score0.03931EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/11/08 12:00 a.m.47 views

RHEL 8 : container-tools:4.0 (RHSA-2022:7469)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7469 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: cri-o:...

7.8CVSS7.7AI score0.03931EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:00 a.m.12 views

The vulnerability of the SSH library (x/crypto/ssh) in the Go programming language, which allows a hacker to execute a “man-in-the-middle” attack.

The vulnerability of the SSH library x/crypto/ssh in the Go programming language is related to data encryption errors. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” attack...

8.1CVSS6.7AI score0.03156EPSS
SaveExploits0References6Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/03 4:40 p.m.36 views

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to bypassing access restrictions due to [CVE-2022-27782]

Summary cURL is used by IBM App Connect Enterprise Certified Container for internal communication and status checking. IBM App Connect Enterprise Certified Container operands may be vulnerable to bypassing access restrictions. This bulletin provides patch information to address the reported...

7.5CVSS7.8AI score0.0293EPSS
SaveExploits1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/03 12:00 a.m.8 views

CVE-2022-41435

OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting XSS vulnerability in the component /system/sshkeys.js. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted public key comments...

5.9AI score0.00486EPSS
SaveExploits1References2
NVD
NVD
added 2022/11/02 12:15 p.m.38 views

CVE-2022-30307

A key management error vulnerability CWE-320 affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack...

8.1CVSS0.00455EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/02 12:15 p.m.23 views

Design/Logic Flaw

A key management error vulnerability CWE-320 affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack...

5.1CVSS7.9AI score0.00455EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/02 12:00 a.m.35 views

CVE-2022-30307

A key management error vulnerability CWE-320 affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack...

3.9CVSS8.2AI score0.00455EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2022/11/02 12:00 a.m.52 views

Security update for EternalTerminal (important)

openSUSE Security Update: Security update for EternalTerminal Announcement ID: openSUSE-SU-2022:10187-1 Rating: important References: 1202432 1202433 1202434 1202435 Cross-References: CVE-2022-24949 CVE-2022-24950 CVE-2022-24951 CVE-2022-24952 CVSS scores: CVE-2022-24949 NVD : 7.5...

7.5CVSS7.4AI score0.01544EPSS
SaveExploits4References4
CVE
CVE
added 2022/11/02 12:00 a.m.91 views

CVE-2022-30307

CVE-2022-30307 affects FortiOS RSA SSH host key handling. Affected versions: FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below. Root cause is a key management error (CWE-320) that may enable an unauthenticated attacker to perform a Man-in-the-Middle (MITM) attack by abusing the RSA SSH ho...

8.1CVSS8AI score0.00455EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/02 12:00 a.m.16 views

CVE-2022-30307

A key management error vulnerability CWE-320 affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack...

3.9CVSS6.9AI score0.00455EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2022/11/01 7:25 p.m.30 views

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 3

Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. In our previous posts, we covered how to achieve access to flash memory and how to extract file system data from the device. In this post, we'll cover how to modify the data we've extracted. Modify extracted file...

0.4AI score
SaveExploits0
Fortinet
Fortinet
added 2022/11/01 12:00 a.m.56 views

Protect

A key management error vulnerability CWE-320 affecting the RSA SSH host key in FortiOS may allow an unauthenticated attacker to perform a man in the middle attack...

5.1CVSS7.8AI score0.00455EPSS
SaveExploits0Affected Software2
OpenVAS
OpenVAS
added 2022/11/01 12:00 a.m.24 views

Slackware: Security Advisory (SSA:2022-304-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.01316EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/10/31 2:28 p.m.222 views

Fodcha DDoS Botnet Resurfaces with New Capabilities

The threat actor behind the Fodcha distributed denial-of-service DDoS botnet has resurfaced with new capabilities, researchers reveal. This includes changes to its communication protocol and the ability to extort cryptocurrency payments in exchange for stopping the DDoS attack against a target,...

0.5AI score
SaveExploits0
GithubExploit
GithubExploit
added 2022/10/31 6:38 a.m.26 views

Exploit for Path Traversal in Mikrotik Routeros

By the Way By the Way is an exploit that enables a root shell...

9.1CVSS9.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2022/10/29 11:30 a.m.53 views

Threatest - Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

7.6AI score
SaveExploits0References2
Veracode
Veracode
added 2022/10/27 12:42 a.m.57 views

Improper Access Cotrol

dropbear is vulnerable to improper access control. The vulnerability exists due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code which allows an attacker to abuse a forwarded agent for logging on to another server...

7.5CVSS7.4AI score0.01463EPSS
SaveExploits0References5Affected Software1
Talos
Talos
added 2022/10/27 12:00 a.m.93 views

InHand Networks InRouter302 console nvram leftover debug code vulnerability

Talos Vulnerability Report TALOS-2022-1518 InHand Networks InRouter302 console nvram leftover debug code vulnerability October 27, 2022 CVE Number CVE-2022-29481 SUMMARY A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A...

6.5CVSS6.3AI score0.00766EPSS
SaveExploits1
Rows per page
Query Builder