1588 matches found
CVE-2024-57237: Improper Neutralization of Input During Web Page Generation
Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting XSS in the /reqproc/procget endpoint. The vulnerability arises because the cmd parameter does not properly sanitize input and the response is served with a Content-Type of text/html. This behavior allows the...
CVE-2024-45340
A flaw was found in cmd/go. This vulnerability allows a malicious server to obtain credentials for unintended domains via improper segmentation of credentials by domain. By default, this issue primarily affects credentials stored in the user's .netrc file...
Linux target_completecmd DoS
The vulnerability of the targetcompletecmd function in the targetcoretransport.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-38325
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle...
CVE-2024-38325: Missing Encryption of Sensitive Data
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle...
Malicious code in arcus-cmd-utils (npm)
This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...
MAL-2025-360 Malicious code in arcus-cmd-utils (npm)
This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the improper completion of ent-slotted when cmdallocindex fails in the net/mlx5 module.This could result in...
PT-2025-4343
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 component. The issue occurs when the cmd alloc index function fails, and the cmd work handler function needs ...
PT-2025-3625
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A race condition was found in the Linux kernel's ila add mapping function, which could lead to a slab-use-after-free error. This issue was discovered by syzbot and is related to concurrent ILA...
PT-2025-1031
Name of the Vulnerable Software and Affected Versions Android versions prior to the January 5, 2025 patch Description The issue is related to a missing bounds check in the build read multi rsp function of gatt sr.cc, which could lead to a possible out of bounds write. This could result in remote...
UBUNTU-CVE-2024-56700
In the Linux kernel, the following vulnerability has been resolved: media: wl128x: Fix atomicity violation in fmcsendcmd Atomicity violation occurs when the fmcsendcmd function is executed simultaneously with the modification of the fmdev-respskb value. Consider a scenario where, after passing th...
PT-2024-37011
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an atomicity violation in the fmc send cmd function. This occurs when the function is executed simultaneously with the modification of the fmdev-resp skb value. I...
CVE-2024-53207 Bluetooth: MGMT: Fix possible deadlocks
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks like the following caused by hcicmdsyncdequeue causing the destroy function to run: INFO: task kworker/u19:0:143 blocked for more than 120 seconds. Tainted: G ...
PT-2024-36972
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue occurs in the cmd to func function when the call pkg-nd reserved2 array is accessed without verifying that call pkg points to a buffer that is appropriately sized as a struct nd cmd...
D-Link DI-8400 Router Arbitrary Command Execution
The vulnerability of the mspinfohtm function in D-Link DI-8400 router microprogramming software is related to the lack of measures taken to neutralize special elements used in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands when processing the flag a...
CVE-2024-51151
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...
CVE-2024-51151: Improper Neutralization of Special Elements used in a Command
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...
D-Link DI-8200 安全漏洞
The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...