log4shell-finder

log4shell-finder - El escáner de sistema de archivos más rápido para instancias log4j Puerto Python de https://github.com/mergebase/log4j-detector log4j-detector es copyright C Copyright 2021 Mergebase Software Inc. https://mergebase.com/ Licenciado bajo GPLv3. La motivación para portarlo a Pytho...

CVE-2021-44228_scanner

Escáner del sistema de archivos para CVE-2021-44228 Tiene como objetivo encontrar JndiLookup.class en casi cualquier directorio o archivo zip, jar, ear, war, incluso en archivos profundamente anidados. find-class-files – La implementación en Clojure debería poder ejecutarse en casi cualquier luga...

K000160515: F5 System Scanner

Topic This article explains how to install and run the F5 System Scanner on BIG-IP and standard x8664 Linux systems. The F5 System Scanner supports the following BIG-IP versions hotfixes EHFs: BIG-IP versions released between October 2025 and Sept 02, 2026 EHFs released between October 2025 and...

CVE-2025-52648: Improper Verification of Cryptographic Signature

HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system...

CVE-2025-53078: Deserialization of Untrusted Data

Deserialization of Untrusted Data in Samsung DMSData Management Server allows attackers to execute arbitrary code via write file to system...

Linux Distros Unpatched Vulnerability : CVE-2024-58009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2capsockalloc A NULL sock pointer is passed...

Linux Distros Unpatched Vulnerability : CVE-2024-46840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUGONrefs == 0, which could be unkind since we aren't holding a lock on the extent leaf...

Fedora 40 : java-17-openjdk (2025-15a818859e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-15a818859e advisory. This is major rework of alternatives usage. We are finally! dropping the parallel installs support, and moving back to good, old java-xyz-openjdk major...

Rockwell Arena Installed (Windows)

Binary data rockwellarenawininstalled.nbin...

CVE-2023-3891: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system...

CVE-2022-48505: Authorization Bypass Through User-Controlled Key

This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...

CVE-2022-39052: Loop with Unreachable Exit Condition

An external attacker is able to send a specially crafted email with many recipients and trigger a potential DoS of the system...

CVE-2022-23132: Improper Access Control

During Zabbix installation from RPM, DACOVERRIDE SELinux capability is in use to access PID files in /var/run/zabbix folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level...

Xen Arm-Based CPU Speculation past the ERET Instruction (XSA-312)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a speculative memory accesses vulnerability. Some CPUs can speculate past an ERET instruction and potentially perform speculative accesses to memory before processing the exception return...

Spring Framework 5.0.x < 5.0.16 / 5.1.x < 5.1.13 / 5.2.x < 5.2.3 Spring Framework Reflected File Download Vulnerability. (CVE-2020-5398)

The remote host contains a Spring Framework library version that is 5.0.x prior to 5.0.16 or 5.1.x prior to 5.1.13 or 5.2.x prior to 5.2.3. It is, therefore, affected by a reflected file download vulnerability. An attacker can exploit this tricking user to click on a URL for trusted domain. Upon...

F5 Networks BIG-IP : Linux kernel vulnerability (K05513373)

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging access to a /dev/sg device...

Malicious File Detection: APT1 Software on System

Binary data wmiapt1filescan.nbin...

System Scanner: Binmap

Binmap is a system scanner; it takes a system or system image and walks through all files, looking for programs and libraries and collecting various information such as dependencies, symbols etc. It supports ELF and PE formats. binmap builds a database of hashes and informations for systems. One ...

openSUSE Security Update : mozilla-js192 (mozilla-js192-4460)

Mozilla XULRunner 1.9.2 was updated to the 1.9.2.17 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20140211)

A buffer overflow flaw was found in the way the qethsnmpcommand function in the Linux kernel's QETH network device driver implementation handled SNMP IOCTL requests with an out-of-bounds length. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their...