Shimo VPN Input Validation Error Vulnerability

Shimo VPN is a VPN Virtual Private Network software based on macOS platform. An input validation error vulnerability exists in the disconnectService function of the assistant service in Shimo VPN version 4.1.5.1. The vulnerability stems from a network system or product that does not properly...

PT-2019-2875

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to an error in processing the Payload parameter and a lack of request authentication in the httpsd process of FortiOS. This can be exploited by a remote attacker to perfo...

PT-2019-2876

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to insufficient input validation in the /login disconnect/current admins page handler of the FortiOS web interface. It can be exploited by a remote attacker using a...

PT-2019-2871

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to a lack of authentication check in the web interface of the FortiOS operating system. This can be exploited by a remote attacker to perform a cross-site request forgery...

PT-2019-2877

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to errors in access control in the FortiOS web interface, specifically affecting the /login disconnect/current admins page handler. It allows a remote attacker to upload...

PT-2019-2874

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to insufficient input validation in the /login disconnect/disconnect admins page handler of the FortiOS web interface. This can be exploited by a remote attacker to cause...

Apple's New MacBook Disconnects Microphone "Physically" When Lid is Closed

Apple introduces a new privacy feature for all new MacBooks that "at some extent" will prevent hackers and malicious applications from eavesdropping on your conversations. Apple's custom T2 security chip in the latest MacBooks includes a new hardware feature that physically disconnects the...

Apple's New MacBook Disconnects Microphone "Physically" When Lid is Closed

Apple introduces a new privacy feature for all new MacBooks that "at some extent" will prevent hackers and malicious applications from eavesdropping on your conversations. Apple's custom T2 security chip in the latest MacBooks includes a new hardware feature that physically disconnects the...

HDX Media Engine Crashes when Disconnecting or Logging off From a Session

The HDX media engine crashes when disconnecting or logging off from a session. Here is how to reproduce the issue: 1. Start a published desktop from a ThinClient dual screen. 2. Within the published Desktop, launch another desktop. 3. Put this desktop on the second screen. 4. Logoff or disconnect...

Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4943, CVE-2015-4941, CVE-2015-4942)

Summary A number of malformed MQTT client flows could be issued by a malicious user to cause the MQXR service to abend and require manual restart. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of...

PT-2018-11059 · Sangoma · Asterisk Open Source

Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 15.x before 15.4.1 Description: An issue was discovered in Asterisk Open Source. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk get...

UBUNTU-CVE-2018-5814

In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operations can be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets...

Denial Of Service (DoS)

mosquitto is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of checks on invalid UTF-8 characters in the topic strings, causing a broker to disconnect when parsing invalid strings...

CVE-2017-9658

Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this...

CVE-2017-9657

The CVE-2017-9657 entry describes an 802.11 WLAN issue in Philips IntelliVue MX40 (Version B.06.18) where partial re-association to the central monitor can leave the MX40 in telemetry mode while the central station expects local monitoring, potentially delaying alarms. Root causes cited include I...

ISC DHCP Server OMAPI Disconnect Denial Of Service (CVE-2017-3144) - Ver2

A denial-of-service vulnerability exists in ISC DHCP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

mysql: prepared statement handle use-after-free after disconnect

A flaw was found in the way MySQL client library libmysqlclient handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient...

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...