31118 matches found
The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows for the execution of arbitrary code
The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-39321
A flaw was found in Golang. Processing an incomplete post-handshake message for a QUIC connection caused a panic...
Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices
In general we have seen two issues with the beta releases from Apple for Sonoma and iOS 17. So if the versions prior to 23.09.1 of the Citrix Secure Access and SSO apps are used with MacOS Sonoma and iOS/iPadOS 17, then the following issues would be seen: Apps will not be able to generate the log...
PT-2025-53231
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the SCSI target core. The target cmd counter struct, allocated by the target alloc cmd counter function, is not freed, leading to memory leaks...
Cisco IOS XR Security Vulnerability
Cisco IOS XR is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XR Software, which originates from a security flaw in the Connection Fault Management CFM feature that could be exploited by an unauthenticated attacker to cause a Denial o...
CVE-2023-38148
Internet Connection Sharing ICS Remote Code Execution Vulnerability...
Remote code execution
Internet Connection Sharing ICS Remote Code Execution Vulnerability...
CVE-2023-38148 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
CVE-2023-38148
Mode C: CVE-2023-38148 is described in connected sources as a Windows Internet Connection Sharing (ICS) Remote Code Execution vulnerability. It is reported that an unauthenticated attacker could exploit ICS by sending a specially crafted data packet to a vulnerable system to install malware. The ...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
Microsoft Windows Internet Connection Sharing (ICS) security vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Internet Connection Sharing ICS. An attacker exploiting this vulnerability could remotely execute code. The...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to sensitive...
PT-2023-5062 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This can be exploited by a remote attacker to execute...
PT-2025-53189
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the kcm sendmsg function. The issue occurs when an error happens after some bytes have been copied during message sending, leaving the last skb...
Apache Superset Security Bypass Vulnerability (CNVD-2024-06819)
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A security bypass vulnerability exists in Apache Superset version 2.1.0 and earlier, which can be exploited by an attacker to register a SQLite database connection...
Apache Superset Security Bypass Vulnerability (CNVD-2024-06820)
Apache Superset is an open source data visualization tool based on Python. Apache Superset suffers from a security bypass vulnerability that can be exploited by an attacker to test a database connection...
CVE-2023-41578
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection...
CVE-2023-39321
Processing an incomplete post-handshake message for a QUIC connection can cause a panic...
