172 matches found
CVE-2024-8963
CVE-2024-8963 Ivanti Cloud Services Appliance - Path Traversal Path Traversal en Ivanti CSA anterior a 4.6 Patch 519 permite a un atacante remoto no autenticado acceder a funcionalidad restringida...
CVE-2024-8190-unauth
CVE-2024-8190 no autenticado Descripción Combinando CVE-2024-8963 & CVE-2024-8190 - PoC para RCE no autenticado en Ivanti CSA 4.6 y anteriores. CVE-2024-8963 Path Traversal en Ivanti CSA anterior al parche 519 de la versión 4.6 permite a un atacante remoto no autenticado acceder a funcionalidades...
CVE-2024-8190
CVE-2024-8190: Inyección de Comandos Autenticada en Ivanti Cloud Service Appliance Prueba de concepto para explotar CVE-2024-8190 en dispositivos vulnerables. Publicación del Blog Causa raíz e indicadores de compromiso aquí:...
EUVD-2026-82005
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that invalid channel. Th...
CVE-2026-90344
CVE-2026-90344 affects the Linux kernel 's mac80211 WiFi subsystem. A refactor of the Channel Switch Announcement (CSA) parsing logic erroneously treats channel zero as equivalent to "no information present," causing the driver to ignore a CSA from an access point that advertises a switch to that...
CVE-2021-44529
CVE-2021-44529 La vulnerabilidad de inyección de código en CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA permite a un usuario no autenticado ejecutar código arbitrario con privilegios limitados nobody...
CVE-2021-44529
CVE-2021-44529 Página web del proveedor: https://www.ivanti.com/ Enlace del software: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Versión: CSA 4.6 4.5 - Fin de soporte EOF Ago 2021 Ejecutar root@kitploit: python3 exploit.py Ejemplo root@kitploit: python3...
kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address
A beacon protection bypass vulnerability was found in the Linux kernel's mac80211 WiFi stack. According to IEEE 802.11-2020, beacon frames must be sent to the broadcast address, but mac80211 incorrectly accepts unicast beacon frames with the Protected Frame bit set to 1. This allows attackers to...
CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
EUVD-2026-48869
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
SUSE CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
DEBIAN-CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
UBUNTU-CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23396 wifi: mac80211: fix NULL deref in mesh_matches_local()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23279 wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in meshrxcsaframe In meshrxcsaframe, elems-meshchanswparamsie is dereferenced at lines 1638 and 1642 without a prior NULL check: ifmsh-chswttl = elems-meshchanswparamsie-meshttl;...
CVE-2026-23279
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in meshrxcsaframe In meshrxcsaframe, elems-meshchanswparamsie is dereferenced at lines 1638 and 1642 without a prior NULL check: ifmsh-chswttl = elems-meshchanswparamsie-meshttl;...