Category Archives: Advisories

Advisories

Multiple vulnerabilities in CTFd versions <= 3.7.4

Read Time:6 Second

Posted by Blazej Adamczyk on Dec 30

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Multiple vulnerabilities in CTFd versions <= 3.7.4
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1 General information
═════════════════════…

Read More

Advisories

IBMi Navigator / CVE-2024-51464 / HTTP Security Token Bypass

Read Time:22 Second

Posted by hyp3rlinx on Dec 30

[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source: https://hyp3rlinx.altervista.org/advisories/IBMi_Navigator_HTTP_Security_Token_Bypass-CVE-2024-51464.txt
[+] x.com/hyp3rlinx
[+] ISR: ApparitionSec

[Vendor]www.ibm.com

[Product]
Navigator for i is a Web console interface where you can perform the
key tasks to administer your IBM i.
IBM Navigator for i supports the vast majority of tasks that were…

Read More

Advisories

IBMi Navigator / CVE-2024-51463 / Server Side Request Forgery (SSRF)

Read Time:22 Second

Posted by hyp3rlinx on Dec 30

[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source: https://hyp3rlinx.altervista.org/advisories/IBMi_Navigator_Server_Side_Request_Forgery_CVE-2024-51463.txt
[+] x.com/hyp3rlinx
[+] ISR: ApparitionSec

[Vendor]www.ibm.com

[Product]
Navigator for i is a Web console interface where you can perform the
key tasks to administer your IBM i.
IBM Navigator for i supports the vast majority of tasks that…

Read More

Advisories

PAN-OS Firewall Denial of Service (DoS) Vulnerability

Read Time:53 Second

What is the Vulnerability?Attackers are exploiting, a Denial-of-Service vulnerability (CVE-2024-3393) in the DNS Security feature of Palo Alto Networks PAN-OS. This vulnerability allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall, causing it to crash and reboot, potentially leading to Denial of Service (DoS).CISA has also added CVE-2024-3393 to its Known Exploited Vulnerability (KEV) Catalog on December 12, 2024.What is the recommended Mitigation?Palo Alto Networks has released a patch for CVE-2024-3393 and noted in their advisory, that they are “aware of customers experiencing this denial of service (DoS) when their firewall blocks malicious DNS packets that trigger this issue”. For detailed guidance, visit https://security.paloaltonetworks.com/CVE-2024-3393 What FortiGuard Coverage is available?FortiGuard Labs recommends users to apply the fix provided by the vendor and follow instructions as mentioned on the vendor’s advisory. The FortiGuard Incident Response team can be engaged to help with any suspected compromise.

Read More

Advisories

gh-2.64.0-1.fc42

Read Time:17 Second

FEDORA-2024-3723af2358

Packages in this update:

gh-2.64.0-1.fc42

Update description:

Automatic update for gh-2.64.0-1.fc42.

Changelog

* Tue Dec 31 2024 Mikel Olasagasti Uranga <mikel@olasagasti.info> – 2.64.0-1
– Update to 2.64.0 – Closes rhbz#2333552 rhbz#2333224 rhbz#2331971
rhbz#2331945

Read More

Advisories

php-tcpdf-6.8.0-1.fc41

Read Time:20 Second

FEDORA-2024-7d6412477b

Packages in this update:

php-tcpdf-6.8.0-1.fc41

Update description:

Version 6.8.0 (2024-12-23)

Requires PHP 7.1+ and curl extension.
Escape error message.
Use strict time-constant function to compare TCPDF-tag hashes.
Add K_CURLOPTS config array to set custom cURL options (NOTE: some defaults have changed).
Add some addTTFfont fixes from tc-lib-pdf-font.

Read More