How Scalping Bots Exploited a Vulnerable API to Disrupt Online Retail Sales

In the fast-paced world of online retail, where customer satisfaction and availability are paramount, a sudden attack by scalping bots can disrupt operations, inflate costs, and damage reputation. A North American Online Retailer faced a month-long bot attack that targeted their inventory system,...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the lack of authentication protection, which allows attackers to disclose sensitive information or cause service interruptions.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the monitoring function for the operational status of the Cisco NX-OS operating system in Cisco Nexus 3000 and Nexus 9000 switches stems from deficiencies in access control. This allows a malicious actor to trigger a service failure.

The vulnerability of the monitoring function for the operational status of the Cisco NX-OS operating system on Cisco Nexus 3000 and Nexus 9000 switches is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sendi...

The vulnerability of the delFacebookPic() function in the Tenda W18E router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the delFacebookPic function in the Tenda W18E router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the get_parentControl_list_Info() function in the Tenda AC10 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the getparentControllistInfo function in the Tenda AC10 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the dev_kfree_skb_any() function (drivers/net/ethernet/google/gve/gve_rx_dqo.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the devkfreeskbany function drivers/net/ethernet/google/gve/gverxdqo.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_mb_find_good_group_avg_frag_lists() function in the ext4 file system of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4mbfindgoodgroupavgfraglists function in the ext4 file system of the Linux operating system is related to read errors beyond the memory boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2024-53873

NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service...

NVIDIA CUDA toolkit 缓冲区错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A buffer error vulnerability exists in the NVIDIA CUDA toolkit, which stems from an out-of-bounds read in the nvdisasm binary, which could lead ...

The vulnerability of the getSaveConfig() function in TOTOLINK CP450 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the getSaveConfig function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the httphost parameter. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the set_ws_action() function in the microprogramming software of the D-Link DAP-1320 wireless signal booster allows a intruder to trigger a service failure.

The vulnerability of the setwsaction function in the microprogramming software of the D-Link DAP-1320 wireless signal amplifier is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

CVE-2024-34036

The CVE concerns the O-RAN Near Realtime RIC I-Release. The issue arises when an attacker inundates the system with a high volume of xApp subscription requests to disrupt the initial gNB–Near RT-RIC connection. Documented impact is disruption of the initial connection; no explicit exploit details...

The vulnerability of the setIpQosRules() function in TOTOLINK CP450 router software allows a intruder to cause a service failure.

The vulnerability of the setIpQosRules function in TOTOLINK CP450 router software lies in the issue of the operation exceeding the buffer in memory when processing the comment parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the adm_mod_pwd() function in the SSI service of the TRENDnet TEW-821DAP wireless access points allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the admmodpwd function in the SSI microprogramming system of TRENDnet TEW-821DAP wireless access points is related to the escape operation from memory buffers when processing the username parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the setUrlFilterRules() function in TOTOLINK CP450 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the setUrlFilterRules function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the url parameter. Exploiting this vulnerability could allow a malicious actor to cause service...

PT-2025-7889 · O Ran · O-Ran Near Realtime Ric

Name of the Vulnerable Software and Affected Versions: O-RAN Near Realtime RIC I-Release affected versions not specified Description: An issue was discovered that allows an attacker to disrupt the initial connection between a gNB and the Near RT-RIC. This can be achieved by sending a high volume ...

CVE-2024-34036

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a service failure.

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing parameters like the netmask and gateway. Exploiting this vulnerability allows an attacker to cause a service failure remotely...