CVE-2021-22853

The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work...

CVE-2020-11154

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

Code injection

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

Denial of Service Vulnerability in DIGI PortServer TS 1

DIGI's PortServer TS serial server provides a simple, reliable and cost-effective solution for connecting multiple serial devices over industry-standard Ethernet. Target applications include retail/point-of-sale, building control and point-of-care. A denial of service vulnerability exists in...

Design/Logic Flaw

Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Viber protocol traffic is encrypted. TCP data packet 9 on port 4244 from the victim's device contains cleartext information such as the device model and OS...

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR operating systems is related to errors in the processing of IS-IS protocol data packets. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Input validation

Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD...

Code injection

The 1 arqupdater, 2 arqcommitter, 3 standardrestorer, 4 arqglacierrestorer, and 5 arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet...

CVE-2017-16895

The 1 arqupdater, 2 arqcommitter, 3 standardrestorer, 4 arqglacierrestorer, and 5 arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet...

The vulnerability of the WPA2 protocol, which stems from errors in managing the cryptographic keys, allows unauthorized access to encrypted information transmitted over a wireless network.

The vulnerability of the WPA2 protocol, which provides security for Wi-Fi wireless networks, is related to errors in the management of cryptographic keys. Exploiting this vulnerability allows a perpetrator within the range of a Wi-Fi network to access encrypted information transmitted over the...

From NMDC to see simple Protocol vulnerability analysis-vulnerability warning-the black bar safety net

Foreword Protocol vulnerability has been is one of the more interesting topics, such as before the second brother in the clouds submitted to the QQ game client of the security Protocol vulnerabilities, such as Students on the TCP Protocol stack vulnerabilities, such as later the NSA leaked the...

Combat a VPN platform vulnerability discovery-vulnerability warning-the black bar safety net

CSRF Used to those not accustomed to the habit of Habit first look at the change the password no matter what to do the capture and see, because something tells me he has a problem Just started to get back the password Like the debug the next data packet, intuition tells me there is a problem, the...

Verizon mailbox now wonderful vulnerability, personal mail can be forwarded to any mailbox-vulnerability warning-the black bar safety net

Verizon is America's Big Three telecommunications giants. A recent Verizon security personnel found the Verizon mailbox system there is a high risk vulnerability can lead to a Verizon mailbox user's mail is any forwarding to other mailbox accounts. Below this screenshot is a Verizon mailbox of a...

3 6 0 Marvel Team virtualization vulnerabilities the fourth bomb: CVE-2 0 1 5-8 5 6 7 vulnerability analysis-vulnerability warning-the black bar safety net

2 0 1 5 years is“the cloud leap”year, is also a virtualization vulnerability really is people cognition, attention of a year, unwilling to“like the wind”3 6 0 Marvel Team take the initiative, with practical actions for cloud computing escort. As of today, we accumulated in kvm, xen, vmware platfo...

QEMU pcnet_receive 堆缓冲区溢出漏洞(CVE-2015-7504)

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://lists.gnu.org/archive/html/qemu-devel/2015-11/msg06342.html pcnet是虚拟化软件QEMU中实现AMD PCNET网卡功能模拟的组件，相关的代码实现位于/hw/net/pcnet.c中。 在qemu软件中使用pcnet网卡，需要如下的命令行进行配置： qemu-system-x8664 centos-6.5-x64.img -m 1024 - net nic,model=pcnet -net user...

Trinity Chipset line card denial of service vulnerability-vulnerability warning-the black bar safety net

Affected system: Juniper Networks Trinity Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 7 4 8 Juniper Networks is a network communications equipment company, a major supplier of IP network and information security solutions...

MGASA-2015-0413 Updated ntp packages fixes security vulnerabilities

It was found that ntpd did not correctly implement the threshold limitation for the '-g' option, which is used to set the time without any restrictions. A man-in-the-middle attacker able to intercept NTP traffic between a connecting client and an NTP server could use this flaw to force that clien...

ntp -- 13 low- and medium-severity vulnerabilities

ntp.org reports: NTF's NTP Project has been notified of the following 13 low- and medium-severity vulnerabilities that are fixed in ntp-4.2.8p4, released on Wednesday, 21 October 2015: Bug 2941 CVE-2015-7871 NAK to the Future: Symmetric association authentication bypass via crypto-NAK Cisco ASIG...