324 matches found
Ursnif Malware Banks on News Events for Phishing Attacks
Ursnif aka Gozi, Dreambot, ISFB is one of the most widespread banking trojans. It has been observed evolving over the past few years. Ursnif has shown incredible theft capabilities. In 2020 Ursnif rose to prominence becoming one of the top ten most prolific pieces of malware. Among its core...
PT-2021-20398
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640-US version 1.01B04 Description: The issue is related to Buffer Overflow, with multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .b...
Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WPA Denial of Service (cisco-sa-wpa-dos-cXshjerc)
According to its self-reported version, IOS-XE is affected by a Denial of Service vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family and could allow an unauthenticated, adjacent attacker to cause denial of...
Design/Logic Flaw
A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...
CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability
A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...
CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability
A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...
CVE-2020-3429
CVE-2020-3429 affects Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. A vulnerability in WPA2/WPA3 security implementation allows an unauthenticated adjacent attacker to trigger a DoS by sending a crafted authentication packet during the WPA2/WPA3 handshake when 802....
PT-2020-4186
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family affected versions not specified Description: A vulnerability in the WPA2 and WPA3 security implementation could allow an unauthenticated, adjacent attacker to cause ...
CVE-2020-3429: Improper Input Validation
A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...
PT-2020-14071
Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.4 through 4.5 Description A buffer overflow issue was discovered in the SNMP agent of Contiki-NG. The function that parses received SNMP requests does not verify the input message's requested variables against the capacit...
iOS / macOS Wifi Proximity Vulnerability
iOS and macOS suffered from a wifi proximity kernel double-free vulnerability in AWDL BSS Steering. if 0 iOS/MacOS wifi proximity kernel double free in AWDL BSS Steering As part of developing an exploit for CVE-2020-3843 a heap overflow in AWDL I've been looking at the code for "BSS Steering". It...
kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c
A flaw was found in the Linux kernel's Marvell wifi chip driver. A heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of servicesystem crash or execute arbitrary code...
PT-2020-17736
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.4.7 watchOS versions prior to 5.3.7 macOS affected versions not specified Description A memory corruption issue was addressed with improved input validation. This issue allows a remote attacker to cause unexpected syst...
Exploit for Out-of-bounds Write in Sudo_Project Sudo
PoC exploit for CVE-2019-18634, a vulnerability in the Sudo pack...
CVE-2014-3447
BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...
CVE-2014-3448
BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...
CVE-2014-3449
BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...
Authentication flaw
BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...