2009 matches found
CGA-4G2J-MW64-7VQW
Bulletin has no description...
PT-2024-40300 · Surrealdb · Surrealdb
Name of the Vulnerable Software and Affected Versions: SurrealDB versions prior to 1.5.4 SurrealDB versions prior to 2.0.0-alpha.6 Description: The issue arises when an authenticated scope user switches working databases in a session using the use method or USE clause. If a user record with an...
BIT-HUBBLE-UI-BACKEND-2024-28860
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...
BIT-CILIUM-PROXY-2024-28860
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...
InnoLoader Malware Stealth Mastery, Unique Instances per Download
...
Hfinger - Fingerprinting HTTP Requests
Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :- Its main objective is to provide unique representations fingerprints of malware requests, which help in their identification. Unique means here that each fingerprint should be seen...
CGA-H628-MQFX-3884
Bulletin has no description...
Moodle uses the same key for QR login and auto-login
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...
GHSA-R82W-3PHG-QVR4 Moodle uses the same key for QR login and auto-login
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...
CVE-2024-38277
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...
CVE-2024-38277
Moodle vulnerability CVE-2024-38277 concerns the QR login key and the auto-login key: a single key must not be reused between them. Connected docs (BIT-MOODLE-2024-38277) describe this exact issue, but do not provide concrete fix/version details. The impact/mitigation specifics are not fully disc...
PT-2024-27916 · Alt Linux · Alt Linux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns the generation of unique keys for QR login and auto-login. Currently, the same key can be used interchangeably between the two, which is insecure. A unique key...
CVE-2024-37893 MFA bypass in oauth flow in Firefly III
Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to Firefly III data using passwords stolen from...
CVE-2024-37893
Firefly III Vulnerability (CVE-2024-37893): A MFA bypass in the Firefly III OAuth flow could allow an attacker to bypass MFA and access data via password spraying, leveraging compromised passwords from other sources. Attackers could enumerate OAuth applications (due to incrementing IDs) to target...
The vulnerability of the tcp_twsk_unique() function in the Linux operating system’s IPv4 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tcptwskunique function in the net/ipv4/tcpipv4.c module, which is part of the Linux kernel’s implementation of the IPv4 protocol, relates to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an...
CGA-QV5P-9M82-733M
Bulletin has no description...
XFS Volume Restore Fails to Mount
Challenge Description: XFS kernel module remembers the old UUID and refuses to mount Cloning an XFS volume and mounting the filesystem of the cloned volume on the same node as the source volume will throw a "duplicate UUID" error or similar errors. The cloning of the volume reflects everything fr...
CGA-QM5P-FXHQ-CM92
Bulletin has no description...