Xiaomi MIUI 安全漏洞

Xiaomi MIUI is an Android-based smartphone operating system developed by Xiaomi Technology China, Inc. A security vulnerability exists in Xiaomi MIUI due to a lack of checksum when using incoming parameters from a three-party application, which could be exploited by attackers to induce users to...

The vulnerability of the software for interacting with servers via CURL is related to deficiencies in the algorithm for calculating the checksum. This allows a hacker to compromise the integrity of the data.

The vulnerability of the software for interacting with servers via CURL is related to the storage of dangerous files. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

CVE-2022-27418

Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c...

DEBIAN-CVE-2022-27418

Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c...

CVE-2022-27418

Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c...

UBUNTU-CVE-2022-27418

Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c...

CVE-2022-27418

Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c...

PT-2022-18412 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is a heap-based buffer overflow in the do checksum math function located at /tcpedit/checksum.c. Recommendations: For Tcpreplay version 4.4.1, consider applying a patch or fix to address the...

Appneta Tcpreplay 缓冲区错误漏洞

Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic for UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Tcpreplay v4.4.1, which stems from a heap-based buffer overflow in dochecksummath in /tcpedit/checksum.c...

WordPress Material Design for Contact Form plugin拒绝服务漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Material Design for Contact Form plugin suffers from a denial of service vulnerability that stems from a plugin validatio...

FreeBSD -- Bhyve e82545 device emulation out-of-bounds write

Problem Description: The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an...

PT-2023-12712 · Bhyve +1 · Bhyve +1

Name of the Vulnerable Software and Affected Versions: bhyve affected versions not specified Description: The e1000 network adapters allow modifications to Ethernet packets during transmission, including IP and TCP checksum insertion, Ethernet VLAN header insertion, and TCP segmentation offload...

The vulnerability in the do_checksum function of the checksum.c component of the Pcap Tcpreplay editing and reproduction utility allows a hacker to cause a service failure.

The vulnerability of the dochecksum function in the checksum.c component of the Pcap Tcpreplay editing and reproduction utility involves copying buffers without checking the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created...

SourceCodester College Website Management System SQL Injection Vulnerability

SourceCodester College Website Management System is an application of SourceCodester, Inc. SourceCodester College Website Management System version 1.0 is vulnerable to SQL injection, which originates from the lack of user-supplied data and output data in the id parameter of...

ZTE ZXHN F680 跨站脚本漏洞

ZTE ZXHN F680 is a dual-band GPON home gateway from ZTE China. A cross-site scripting vulnerability exists in the ZTE ZXHN F680 version 6.0.10p3n20, which originates from the lack of checksum filtering of user-supplied and output data in the gateway name. An authenticated attacker can exploit thi...

Cross-site Scripting (XSS)

jenkins Git Plugin is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause...

FastFinder - Incident Response - Fast Suspicious File Finder

FastFinder is a lightweight tool made for threat hunting, live forensics and triage on both Windows and Linux Platforms. It is focused on endpoint enumeration and suspicious file finding based on various criterias: file path / name md5 / sha1 / sha256 checksum simple string content match complex...

GSD-2022-1000951 openvswitch: Fix setting ipv6 fields causing hw csum failure

openvswitch: Fix setting ipv6 fields causing hw csum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.304 by commit...

GSD-2022-1000860 openvswitch: Fix setting ipv6 fields causing hw csum failure

openvswitch: Fix setting ipv6 fields causing hw csum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

OPENSUSE-SU-2022:0074-1 Security update for perl-App-cpanminus

This update for perl-App-cpanminus fixes the following issues: updated to 1.7045 see /usr/share/doc/packages/perl-App-cpanminus/Changes Security fixes: - CVE-2020-16154 remove the functionality to verify CHECKSUMS signature updated to 1.7044 see /usr/share/doc/packages/perl-App-cpanminus/Changes...