EUVD-2020-22905

Malware in sbrugna...

EUVD-1999-1388

Malware in sbrugna...

EUVD-2006-5801

Malware in sbrugna...

EUVD-2018-0884

Malware in sbrugna...

CVE-2025-6302

CVE-2025-6302 affects TOTOLINK EX1200T (4.1.2cu.5232_B20210713). The vulnerable element is setStaticDhcpConfig in /cgi-bin/cstecgi.cgi, where manipulating the Comment argument causes a stack-based buffer overflow. The impact is remote exploitation with a disclosed exploit; several sources corrobo...

CVE-2020-35226

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command...

PVS UEFI targets fail to boot when downloading TFTP bootstrap

The customer was migrating from PVS BIOS based target devices to PVS UEFI based target devices. BIOS based target devices were deprecated in PVS 2203, and all customers should be migrating to UEFI based target devices. The customer was using VMware based target devices, and was reconfiguring targ...

The vulnerability of the DHCP configuration software package, related to the provision of unlimited memory, allows a attacker to cause a service failure.

The vulnerability of the ISC DHCP configuration software package is related to the provision of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the add_option() function in the ISC DHCP configuration program allows a attacker to cause a service failure.

The vulnerability of the addoption function in the ISC DHCP configuration program is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

DHCP configurations for PVS

Citrix recommends DHCP configuration which ensures that a PVS target device receives the same IP address for all DHCP requests during its booted lifespan. The end result should be a target device using the same IP address it received at boot time, for the entirety of its booted lifespan. DHCP...

PT-2024-4394 · Ruijie · Ruijie Rg-Uac

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC version 1.0 Description: A critical issue has been found in the function get ip addr details of the file /view/dhcp/dhcpConfig/commit.php. The manipulation of the argument ethname leads to os command injection. The attack may be...

CVE-2024-34207

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function...

CVE-2024-4503

A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcprelaycommit.php. The manipulation of the argument interfacefrom leads to os command injection. The attack can be...

PVS PXE boot fails: No more network devices / No bootable device

PXE boot fails TFTP transfer after receiving a valid DHCP configuration. Sample failure of this type in screenshot below. Network traces show correct ARP responses going both ways. The target device will not send the first read request unless the ARP response is correct. line 13 in the screenshot...

NETGEAR JGS516PE/GS116Ev2 Unauthenticated Write Access Privilege to DHCP Configuration Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A security vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker can exploit the vulnerability to force multiple DHCP requests or disable them, potentially resulting in a denial of service...

CVE-2020-35226

CVE-2020-35226 affects NETGEAR JGS516PE/GS116Ev2 switches (v2.6.0.43). Affected component: DHCP configuration on the switch. Root cause: unauthenticated write access to DHCP settings, allowing modification via the corresponding write request command. Impact per sources: potential for DHCP configu...

SUSE-SU-2020:14454-1 Security update for python-azure-agent

This update for python-azure-agent fixes the following issues: + Properly set the dhcp configuration to push the hostname to the DHCP server bsc1173866 + Do not bring the interface down to push the hostname, just use ifup + Set the hostname using hostnamectl to ensure setting is properly applied...

Design/Logic Flaw

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerabilit...

Smoothwall Express 3.1-SP4-polar-x86_64-update9 Cross Site Scripting

Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link: https://sourceforge.net/projects/smoothwall/files/SmoothWall/3.1%20SP4/Express-3.1-SP4-x8664.iso/download...

SUSE SLES12 Security Update : dracut (SUSE-SU-2017:2696-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...