55 matches found
TP-Link TL-WR849N Remote Code Execution
Exploit Title: TP LINK TL-WR849N - Remote Code Execution Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.tp-link.com/br/support/download/tl-wr849n/Firmware Version: TL-WR849N 0.9.1 4.16 Tested on: linux, windows CVE : CVE-2020-93...
TP LINK TL-WR849N - Remote Code Execution
Exploit Title: TP LINK TL-WR849N - Remote Code Execution Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.tp-link.com/br/support/download/tl-wr849n/Firmware Version: TL-WR849N 0.9.1 4.16 Tested on: linux, windows CVE : CVE-2020-93...
TP LINK TL-WR849N - Remote Code Execution
TP LINK TL-WR849N - Remote Code Execution Exploit Title: TP LINK TL-WR849N - Remote Code Execution Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.tp-link.com/br/support/download/tl-wr849n/Firmware Version: TL-WR849N 0.9.1 4.16...
CVE-2020-9374
CVE-2020-9374 affects TP-Link TL-WR849N device with firmware version 0.9.1 4.16. The vulnerability is a remote command execution in the diagnostics area triggered by sending shell metacharacters to the panel’s traceroute feature, indicating a command-injection flaw in the diagnostics path. Exploi...
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
CVE-2019-9374
CVE-2019-9374 entry rejected/not used; this CVE ID has been withdrawn by its CNA.
CVE-2015-9374
The CVE-2015-9374 entry concerns the Stripe Add-on for iThemes Exchange (WordPress) with an XSS vulnerability reported as occurring before version 1.2.0. The underlying issue is an XSS via add_query_arg() and remove_query_arg(), indicating input handling flaws in the plugin’s URL parameter proces...
Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3414-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3414-1 advisory. Leo Gaspard discovered that QEMU incorrectly handled VirtFS access control. A guest attacker could use this issue to elevate privileges insid...
Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7, Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7, Red Hat OpenStack Platform 8.0 Liberty, Red Hat OpenStack Platform 9.0 Mitaka, Red Hat OpenStack Platform 10.0 Newton,...
Fedora 25 : 2:qemu (2017-f941184db1)
CVE-2017-7718: cirrus: OOB read access issue bz 1443443 - CVE-2016-9603: cirrus: heap buffer overflow via vnc connection bz 1432040 - CVE-2017-7377: 9pfs: fix file descriptor leak bz 1437872 - CVE-2017-7980: cirrus: OOB r/w access issues in bitblt bz 1444372 - CVE-2017-8112: vmwpvscsi: infinite...
[SECURITY] [DSA 3920-1] qemu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3920-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2017 https://www.debian.org/security/faq -...
Security update for qemu (important)
This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service infinite loop by leveraging an incorrect return value bsc1042159. - CVE-2017-8379: Memory leak in the keyboard input...
SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:1774-1)
This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service infinite loop by leveraging an incorrect return value bsc1042159. - CVE-2017-8379: Memory leak in the keyboard input...
CVE-2017-9374
CVE-2017-9374 describes a memory leak in QEMU when built with USB EHCI Emulation support. A local privileged guest user can repeatedly hot-unplug a USB device, causing memory consumption and a denial of service on the host QEMU process. The description confirms the vulnerable component as the USB...
openSUSE Security Update : wireshark (openSUSE-2016-2923)
This update to wireshark 2.2.2 fixes the following issues : - CVE-2016-9372: Profinet I/O long loop boo1010807 - CVE-2016-9374: AllJoyn crash boo1010752 - CVE-2016-9376: OpenFlow crash boo1010735 - CVE-2016-9373: DCERPC crash boo1010754 - CVE-2016-9375: DTN infinite loop boo1010740 This update al...
[ASA-201611-25] wireshark-cli: multiple issues
Arch Linux Security Advisory ASA-201611-25 ========================================== Severity: High Date : 2016-11-24 CVE-ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 Package : wireshark-cli Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summa...
[ASA-201611-24] wireshark-qt: multiple issues
Arch Linux Security Advisory ASA-201611-24 ========================================== Severity: High Date : 2016-11-24 CVE-ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 Package : wireshark-qt Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summar...
Debian DLA-714-1 : wireshark security update
The following vulnerabilities have been discovered in the Debian Wheezy's Wireshark version : CVE-2016-9373 The DCERPC dissector could crash CVE-2016-9374 The AllJoyn dissector could crash CVE-2016-9375 The DTN dissector could ender an infinite loop CVE-2016-9376 The OpenFlow dissector could cras...
[SECURITY] [DLA 714-1] wireshark security update
Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u5 CVE ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 The following vulnerabilities have been discovered in the Debian Wheezys Wireshark version: CVE-2016-9373 The DCERPC dissector could crash CVE-2016-9374 The AllJoyn...