Cross site request forgery (csrf)

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

Design/Logic Flaw

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

Security update for dovecot23 (moderate)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2021:1225-1 Rating: moderate References: 1187418 1187419 1187420 SLE-19970 Cross-References: CVE-2020-28200 CVE-2021-29157 CVSS scores: CVE-2020-28200 NVD : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L...

A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System

A cyber attack that derailed websites of Iran's transport ministry and its national railway system earlier this month, causing widespread disruptions in train services, was the result of a never-before-seen reusable wiper malware called "Meteor." The campaign — dubbed "MeteorExpress" — has not be...

Session reliability feature doesn't restore session when ICA AppFlow is enabled

Session Reliability Feature Does Not Restore Session When ICA AppFlow is Enabled and NetScaler High Availability Failover Occurs When AppFlow Logging is enabled on NetScaler Gateway virtual server, NetScaler failover causes ICA sessions to disconnect...

Users unable to relaunch the published applications, error "Citrix workspace will try to reconnect..."

Users get disconnected from their active published app session When attempting to relaunch the same app, they get a popup saying 'Citrix Workspace app will try to reconnect for xxx more minutes. Click Disconnect if you want to stop'...

PT-2021-7064

Name of the Vulnerable Software and Affected Versions BlueZ version 5.61 Description A use-after-free issue can occur in the gatt-database.c file when a client disconnects during D-Bus processing of a WriteValue call, potentially allowing a remote attacker to access confidential information...

CVE-2021-24231

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link...

Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection

The wpajaxnfoauthdisconnect from the plugin had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection...

Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection

The wpajaxnfoauthdisconnect from the plugin had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection. PoC...

Logic Flaw Vulnerability in Tianyi Broadband Gov-Enterprise Gateway A8-C (8+8)

Tianyi Broadband Government and Enterprise Gateway A8-C8+8 is the broadband of Telecom Enterprise Broadband. A logic flaw vulnerability exists in Tianyi Broadband Government and Enterprise Gateway A8-C8+8. An attacker can exploit the vulnerability to cause an arbitrary user can modify the LOID to...

CVE-2020-35555

An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported, the device does not lock upon disconnection of a call with the cover closed. The LG ID is LVE-SMP-200027 December 2020...

CVE-2020-35555

The CVE-2020-35555 entry concerns LG mobile devices running Android 10 with dual-screen support. The issue is that, when a call is disconnected while the cover is closed, the device does not lock as expected, potentially leaving the device accessible without authentication. The details specify th...

CVE-2020-35555

An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported, the device does not lock upon disconnection of a call with the cover closed. The LG ID is LVE-SMP-200027 December 2020...

PT-2020-17348

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 10 software Description An issue was discovered on LG mobile devices where the device does not lock upon disconnection of a call with the cover closed when a dual-screen configuration is supported...

CVE-2020-35555: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported, the device does not lock upon disconnection of a call with the cover closed. The LG ID is LVE-SMP-200027 December 2020...

openSUSE Security Update : wpa_supplicant (openSUSE-2020-2053) (KRACK)

This update for wpasupplicant fixes the following issues : Security issue fixed : - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed : - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...