Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

多款 Mitsubishi Electric 设备缓冲区错误漏洞

The Mitsubishi Electric GT27 and others are a GOT2000 series graphical operator terminal from Mitsubishi Electric Japan. A buffer error vulnerability exists in multiple Mitsubishi Electric devices. An attacker could exploit this vulnerability to cause a denial of service on the device. The...

Qualcomm 组件输入验证错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides the functionality of Qualcomm devices. A security vulnerability exists in the Qualcomm Component that originates from an integer overflow due to improper length checking. The following products and...

Apple iOS 信任管理问题漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS where an attacker in a privileged network location may be able to alter network traffic. The following products and versions are affected: iPhone 6s and later, iPad Pro all...

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion...

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

Xerox Phaser 6510 安全漏洞

The Xerox Phaser 6510 is a printer from the American company Xerox. It provides printing functionality. A security vulnerability exists in Xerox Phaser that could allow a remote attacker with a "weaponized clone file" to execute arbitrary commands within the web user interface. The following...

Xerox AltaLink 安全漏洞

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A security vulnerability exists in Xerox AltaLink that could allow an unauthorized user to delete arbitrary files from disk via the Scan Mailbox feature. The following products and versio...

CVE-2021-1451

A vulnerability in the Easy Virtual Switching System VSS feature of Cisco IOS XE Software for Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying Linux operating system of an...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5 before 1.0.0.76...

Netgear NETGEAR 授权问题漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR has a security vulnerability that affects the following products and versions: RBK852 before 3.2.17.12, RBK853 before...

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in Certain NETGEAR that allows command injection by an unauthenticated attacker. The following products and...

Google Releases Spectre PoC Exploit For Chrome

Google has released proof-of-concept PoC exploit code, which leverages the Spectre attack against the Chrome browser to leak data from websites. Three years after the Spectre attack was first disclosed, researchers with Google have now released a demonstration website that leverages the attack,...

PT-2021-7092

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Server and Data Center versions prior to 7.4.17 Atlassian Confluence Server and Data Center versions 7.13.0 through 7.13.6 Atlassian Confluence Server and Data Center versions 7.14.0 through 7.14.2 Atlassian Confluence...

Cisco Anyconnect Secure Mobility Client Input Validation Error Vulnerability

Cisco Anyconnect Secure Mobility Client is a VPN client software for secure connectivity from Cisco. A security vulnerability exists in Cisco AnyConnect Secure Mobility Client, which can be exploited by an attacker to cause a denial of service on an affected device...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

PT-2021-2077

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the implementation of PFX encryption technology in Microsoft Windows, specifically concerning the lack of protection for service data. This could allow an...

PT-2021-2054 · Microsoft · Windows Trust Verification Api +1

Name of the Vulnerable Software and Affected Versions: Windows Trust Verification API affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Trust Verification API, which is caused by resource release errors. This vulnerability can be...

Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices

SonicWall on Monday warned of active exploitation attempts against a zero-day vulnerability in its Secure Mobile Access SMA 100 series devices. The flaw, which affects both physical and virtual SMA 100 10.x devices SMA 200, SMA 210, SMA 400, SMA 410, SMA 500v, came to light after the NCC Group on...

Command Injection Vulnerability in Multiple Cisco Products

Cisco SD-WAN vManage Software and others are products of Cisco. cisco SD-WAN vManage Software is a management software for SD-WAN software-defined wide-area network solutions. cisco SD-WAN vEdge Routers is a software for authentication between Cisco vSmart Controllers and vEdge routers...