32 matches found
CLEANSTART-2024-JT10095 When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest
Security vulnerability affects the firefox package. When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2SHELL · 1337Scanner · 1337Assessor An educational and def...
Astra Linux – Vulnerability in Firefox
When downloading an update for an addon, the version of the downloaded addon update was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a previous version. This...
PYSEC-2026-1763 PDM Trojan Lockfile
Summary It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. Details Project foo can be targeted by creating the project foo-2 and uploading the fil...
PDM Trojan Lockfile
SummaryIt's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. DetailsProject foo can be targeted by creating the project foo-2 and uploading the file...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection...
EUVD-2022-2733
Malicious code in bioql PyPI...
EUVD-2022-37426
Malicious code in bioql PyPI...
CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...
Ingress-Nginx Admission Controller RCE Escalation
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...
SMB Windows Full Build Number
Gets the full build number of a Windows operating system using PowerShell via SMB. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...
Update Rollup 4 for System Center 2016 Operations Manager
Update Rollup 4 for System Center 2016 Operations Manager Applies To System Center 2016 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2016 Operations Manager. This article also contains the installation instructions...
KB5046399: Windows Recovery Environment update for Windows Server 2022: October 8, 2024
KB5046399: Windows Recovery Environment update for Windows Server 2022: October 8, 2024 Applies To Windows Server 2022 Note IMPORTANT This update will not be offered if your Windows Recovery Environment WinRE meets any of the following conditions: If the WinRE recovery partition does not have...
Description of the security update for Visual Studio 2015 Update 3: January 9, 2024 (KB5030979)
Description of the security update for Visual Studio 2015 Update 3: January 9, 2024 KB5030979 Applies To Visual Studio 2015 Update 3 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Summary An elevation of privilege vulnerability exists if the Diagnostics Hub Standard...
SUSE CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...
CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...
CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...
CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...
UBUNTU-CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...
CVE-2022-34471
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...