CVE-2023-50128

creationtimestamp| type| source ---|---|--- 2024-01-11 22:31:44+00:00| seen| https://t.me/ctinow/166882 2024-01-30 17:21:50+00:00| seen| https://t.me/ctinow/176096 2025-06-20 16:44:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18994...

Siemens SCALANCE OpenSSL NULL Pointer Dereference (CVE-2023-0401)

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

CVE-2023-44304

creationtimestamp| type| source ---|---|--- 2023-12-23 09:11:38+00:00| seen| https://t.me/ctinow/158735...

GHSA-6944-6PMV-6MP2 free5gc Buffer Overflow vulnerability

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

[slackware-security] sudo

New sudo packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/sudo-1.9.15-i586-1slack15.0.txz: Upgraded. The sudoers plugin has been modified to make it more resilient to ROWHAMME...

CVE-2023-40180

creationtimestamp| type| source ---|---|--- 2023-10-16 22:32:06+00:00| seen| https://t.me/cibsecurity/72331 2023-10-28 08:38:31+00:00| seen| Telegram/OhW5GopBigLfjzKOR0cxeFPlKz1cWMVASx47ldhohB60wA...

CVE-2023-41636

creationtimestamp| type| source ---|---|--- 2023-08-31 18:13:14+00:00| seen| https://t.me/cibsecurity/69555 2023-10-22 22:26:28+00:00| published-proof-of-concept| Telegram/7a7fweCj36f2cd-3XHNsj84vMqrUUzQeix11cFhtTPwJ...

CVE-2023-3842

creationtimestamp| type| source ---|---|--- 2023-07-23 07:24:58+00:00| seen| https://t.me/cibsecurity/67126...

CVE-2023-25090

creationtimestamp| type| source ---|---|--- 2023-07-06 18:20:24+00:00| seen| https://t.me/cibsecurity/66083...

AZL-31144 CVE-2023-2650 affecting package edk2 for versions less than 20230301gitf80f052277c8-37

Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience...

CVE-2023-24950

creationtimestamp| type| source ---|---|--- 2023-05-09 22:38:53+00:00| seen| https://t.me/cibsecurity/63659...

CVE-2023-22846

creationtimestamp| type| source ---|---|--- 2023-04-20 22:30:55+00:00| seen| https://t.me/cibsecurity/62544...

CVE-2023-30459

creationtimestamp| type| source ---|---|--- 2023-04-10 12:27:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4146 2023-04-14 18:26:05+00:00| seen| https://t.me/cibsecurity/62157 2026-07-29 12:00:39+00:00| seen| https://t.me/CVEhub/10377 2026-07-30 00:01:08+00:00| seen|...

K26899353: libcurl vulnerability CVE-2016-8621

Security Advisory Description The curlgetdate function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short. CVE-2016-8621 Impact Custom monitors or shell scripts using curl to download content with a malformed time stamp may be...

SUSE CVE-2016-2180

The TSOBJprintbio function in crypto/ts/tslib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol TSP implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted time-stamp file that is mishandled by...

SUSE CVE-2021-42260

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXMLUTFLEAD0 case. It can be triggered by a crafted XML message and leads to a denial of service...

GHSA-VRH7-X64V-7VXQ openssl-src contains `NULL` dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

openssl-src contains `NULL` dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

ALPINE-CVE-2023-0401

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...