CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

PYSEC-2021-354

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31604

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31604

CVE-2021-31604 affects furlongm/openvpn-monitor up to version 1.1.3. The issue is a cross-site request forgery (CSRF) that allows disconnecting an arbitrary client. Root cause: CSRF in the disconnect action handling. Impact is described as an ability to disrupt a client connection; CVSS data in t...

CVE-2021-31604

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

PT-2021-19443

Name of the Vulnerable Software and Affected Versions furlongm openvpn-monitor versions 1.1.3 and earlier Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to disconnect an arbitrary client. Recommendations For versions 1.1.3 and earlier, as a temporary...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31604: Cross-Site Request Forgery (CSRF)

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31606: Improper Authentication

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

Openvpn OpenVPN 授权问题漏洞

Openvpn OpenVPN is a software package from the American company OpenVPN Openvpn for creating encrypted tunnels for Virtual Private Networks VPNs, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using a public key, an e-certificat...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Vbi

Detailed Report: https://oss-fuzz.com/testcase?key=6417112441159680 Project: wolfmqtt Fuzzing Engine: afl Fuzz Target: wolfmqtt-fuzzer Job Type: aflasanwolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62100005dee9 Crash State: MqttDecodeVbi MqttDecodeProps...

PT-2021-27804

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow issue occurs when writing, leading to a crash. The crash involves the MqttDecode Disconnect, MqttClient DecodePacket, and MqttClient...

Maxpatrol 8 / Xspider Denial Of Service

Exploit Title: Positive Technologies Maxpatrol 8 & Xspider Remote DoS Force clients disconect Date: 2020-08-20 Exploit Author: AsCiI Vendor Homepage: https://www.ptsecurity.com/ Affected Positive Technologies Maxpatrol 8 & Xspider Scanners Vulnerability reported in 09.2020. No reply from vendor...

UBUNTU-CVE-2021-3752

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to...

PT-2021-4204 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem due to a race condition when user calls connect to the socket and disconnect simultaneously. This flaw allows ...

The vulnerability of the dccp_disconnect function (net/dccp/proto.c) in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the dccpdisconnect function net/dccp/proto.c is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan

A use-after-free flaw was found in hcisendacl in the bluetooth host controller interface HCI in Linux kernel, where a local attacker with an access rights could cause a denial of service problem on the system The issue results from the object hchan, freed in hcidisconnloglinkcompleteevt, yet stil...