CGA-QH7X-GWRF-HFQM

Bulletin has no description...

CGA-Q3CV-CGP7-8PC3

Bulletin has no description...

CGA-C8FQ-WH67-PF6C

Bulletin has no description...

CGA-4G2J-MW64-7VQW

Bulletin has no description...

PT-2024-40300 · Surrealdb · Surrealdb

Name of the Vulnerable Software and Affected Versions: SurrealDB versions prior to 1.5.4 SurrealDB versions prior to 2.0.0-alpha.6 Description: The issue arises when an authenticated scope user switches working databases in a session using the use method or USE clause. If a user record with an...

BIT-HUBBLE-UI-BACKEND-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

BIT-CILIUM-PROXY-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

InnoLoader Malware Stealth Mastery, Unique Instances per Download

...

Hfinger - Fingerprinting HTTP Requests

Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :- Its main objective is to provide unique representations fingerprints of malware requests, which help in their identification. Unique means here that each fingerprint should be seen...

CGA-H628-MQFX-3884

Bulletin has no description...

GHSA-R82W-3PHG-QVR4 Moodle uses the same key for QR login and auto-login

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...

Moodle uses the same key for QR login and auto-login

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...

CVE-2024-38277

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...

CVE-2024-38277

The virtual learning environment Moodle is affected by a vulnerability where a unique key should be generated for a user's QR login key and their auto-login key to prevent the same key from being used interchangeably between the two. Exploiting this flaw could allow a remote attacker to gain unau...

PT-2024-27916 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns the generation of unique keys for QR login and auto-login. Currently, the same key can be used interchangeably between the two, which is insecure. A unique key...

CVE-2024-37893 MFA bypass in oauth flow in Firefly III

Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to Firefly III data using passwords stolen from...

CVE-2024-37893

Firefly III Vulnerability (CVE-2024-37893): A MFA bypass in the Firefly III OAuth flow could allow an attacker to bypass MFA and access data via password spraying, leveraging compromised passwords from other sources. Attackers could enumerate OAuth applications (due to incrementing IDs) to target...

The vulnerability of the tcp_twsk_unique() function in the Linux operating system’s IPv4 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcptwskunique function in the net/ipv4/tcpipv4.c module, which is part of the Linux kernel’s implementation of the IPv4 protocol, relates to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an...

CGA-QV5P-9M82-733M

Bulletin has no description...

XFS Volume Restore Fails to Mount

Challenge Description: XFS kernel module remembers the old UUID and refuses to mount Cloning an XFS volume and mounting the filesystem of the cloned volume on the same node as the source volume will throw a "duplicate UUID" error or similar errors. The cloning of the volume reflects everything fr...