CVE-2023-23006

creationtimestamp| type| source ---|---|--- 2023-03-01 22:33:37+00:00| seen| https://t.me/cibsecurity/59261...

CVE-2023-23006

CVE-2023-23006 affects the Linux kernel prior to 5.15.13. The vulnerability lies in drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c, which misinterprets the return value of mlx5_get_uars_page in error cases (expects NULL but receives an error pointer). This can lead to a faulty NULL-...

CVE-2023-23006

In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/drdomain.c misinterprets the mlx5getuarspage return value expects it to be NULL in the error case, whereas it is actually an error pointer...

K30585021: BIG-IQ XSS vulnerability CVE-2021-23006

Security Advisory Description Undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerability. CVE-2021-23006 Impact An attacker may exploit this vulnerability using a crafted URL to a reflected cross-site scripting XSS in an undisclosed page of the BIG-IQ user interface. Security...

CVE-2022-23006

creationtimestamp| type| source ---|---|--- 2022-09-28 02:36:41+00:00| seen| https://t.me/cibsecurity/50553...

CVE-2022-23006

CVE-2022-23006 is a stack-based buffer overflow affecting Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi. The issue allows a local attacker to read the /etc/version file by exploiting a vulnerable code path that relies on insecure functions; exploitation requires chaining with ...

CVE-2021-23006

CVE-2021-23006 concerns a reflected cross-site scripting (XSS) vulnerability in undisclosed BIG-IQ pages. According to F5 advisory K30585021, affected BIG-IQ versions include 7.0.0–7.1.0 and 6.0.0–6.1.0, with fixes introduced in 8.0.0 for the BIG-IQ REST services. The issue can be triggered by cr...

Eaton Network Shutdown Module 3.21 PHP Code Injection

Eaton Network Shutdown module versions 3.21 and below suffer from a remote PHP code injection vulnerability. This is a python exploit for a previously disclosed finding. !/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage...