CVE-2022-30319

Saia Burgess Controls SBC PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls SBC PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus 5050/UDP authentication. The potential impact is:...

The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to replace the value of the URL address line.

The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to remotely replace the value of the address bar...

Huawei Emui and Magic UI IP Address Spoofing Vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI have security vulnerabilities that can be exploited by attackers to cause a denial of service...

CVE-2021-22483

There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS...

CVE-2021-22483

There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS...

Design/Logic Flaw

There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS...

CVE-2021-22483

CVE-2021-22483 describes an IP address spoofing vulnerability in Huawei smartphones that can enable a DoS. The connected records cite network‑based exploitation with a CVSSv3.1 base score of 7.5 (HIGH) and vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, but no specific affected versions, component de...

CVE-2021-36215

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling...

Design/Logic Flaw

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling...

Critical Auth Bypass Bug Affect NETGEAR Smart Switches — Patch and PoC Released

Networking, storage and security solutions provider Netgear on Friday issued patches to address three security vulnerabilities affecting its smart switches that could be abused by an adversary to gain full control of a vulnerable device. The flaws, which were discovered and reported to Netgear by...

EasyApache 输入验证错误漏洞

PHP is a scripting language that executes on the server side. PHP suffers from an input validation error vulnerability that can be exploited by an attacker to spoof a user via PHP's FILTERVALIDATEURL in order to redirect them to a malicious site...

UBUNTU-CVE-2020-26555

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN...

PT-2021-11245 · Bluetooth Special Interest +6 · Bluetooth Core Specification +6

Name of the Vulnerable Software and Affected Versions: Bluetooth Core Specification versions 1.0B through 5.2 Description: The issue allows an unauthenticated nearby device to spoof the BD ADDR of the peer device to complete pairing without knowledge of the PIN, potentially permitting unauthorize...

PT-2021-4118 · Hashicorp · Hashicorp Nomad +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Nomad and Nomad Enterprise versions 1.0.4 and earlier Description: The issue is related to an error in bridge networking mode, allowing ARP spoofing from other bridged tasks on the same node. This could potentially allow a remote...

The vulnerability of D-Link DSL-2888A router microprogramming software, related to deficiencies in authentication procedures, allows attackers to carry out IP spoofing attacks.

The vulnerability of D-Link DSL-2888A router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a remote attacker to carry out IP spoofing attacks...

CentOS 8 : thunderbird (CESA-2020:2046)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2046 advisory. - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Arbitrary local file access with 'Copy as cURL' CVE-2020-12392 - Mozilla:...

Opera Mini for Android security vulnerability

Opera Mini is a web browser application. A security vulnerability exists in Opera Mini for Android below 53.1, which can be exploited by an attacker to spoof a URL with a long domain name, such as www.safe.opera.com.attacker.com, where the user will only see the exact number of preceding parts e....

CVE-2020-26254

omniauth-apple is the OmniAuth strategy for "Sign In with Apple" RubyGem omniauth-apple. In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vulnerability impacts applications using the omniauth-apple strategy of OmniAuth and using the...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2020:2450-1)

This update for apache2 fixes the following issues : CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request bsc1175071. CVE-2020-11985: IP address spoofing when proxying using modremoteip and modrewrite bsc1175072. CVE-2020-11993: When...

IP Address Spoofing

httpd24-httpd is vulnerable to IP address spoofing. The vulnerability exists when proxying using modremoteip and modrewrite can cause spoof in logging and PHP scripts...