CVE-2021-25681

Summary: CVE-2021-25681 affects AdTran Personal Phone Manager 10.8.1. The issue enables exfiltration of data over DNS by using exposed web servers as DNS redirectors to tunnel arbitrary data via DNS. This could allow an attacker to leak information through DNS traffic. Root cause/tech details pro...

CVE-2021-25681

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 706...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

CVE-2021-25679

CVE-2021-25679 affects AdTran Personal Phone Manager (authenticated stored XSS) with confirmed impact on v10.8.1 (and possibly later versions). Verified devices include NetVanta 7060/7100 (End of Life; no patch). Public details across sources (NVD, Exploit-DB, PacketStorm, GitHub repo) describe a...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

PT-2021-16750 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact versions 10.8.1 and below, and...

PT-2021-16751

Name of the Vulnerable Software and Affected Versions AdTran Personal Phone Manager version 10.8.1 Description The issue allows for exfiltration of data over DNS, potentially enabling exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS...

PT-2021-16749 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issue. This issue impacts versions 10.8.1 and below, and...

April 13, 2021—KB5001342 (OS Build 17763.1879)

None None...

April 13, 2021—KB5001347 (OS Build 14393.4350) - EXPIRED

None None...

April 13, 2021—KB5001337 (OS Build 18363.1500)

None None...

April 13, 2021—KB5001339 (OS Build 17134.2145

None None...

Cisco Small Business RV Series Router Unsupported Detection

The Cisco Small Business RV series router is no longer supported. Note that only models RV110W, RV130, RV130W, and RV215W are detected at this time. Lack of support implies that no security patches for the product will be released by the vendor. As a result, it is likely to contain security...

DEBIAN-CVE-2021-28875

In the standard library in Rust before 1.50.0, readtoend does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow...

Mozilla Rust 缓冲区错误漏洞

Rust is a systems programming language characterized by fast operation, the ability to prevent segmentation errors, and thread-safety. A buffer overflow vulnerability exists in the standard stock in versions of Rust prior to 1.50.0. The vulnerability stems from readtoend not validating the return...

Cisco Will Not Patch Critical RCE Flaw Affecting End-of-Life Business Routers

Networking equipment major Cisco Systems has said it does not plan to fix a critical security vulnerability affecting some of its Small Business routers, instead urging users to replace the devices. The bug, tracked as CVE-2021-1459, is rated with a CVSS score of 9.8 out of 10, and affects RV110W...

Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers

Cisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems. The three Cisco router models...

CVE-2020-24139

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services...

CVE-2021-26709

D-Link DSL-320B-D1 devices through EU1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Autechre RetroArch 命令注入漏洞

Autechre RetroArch is an application from Autechre open source. libretro API reference front-end. RetroArch suffers from a command injection vulnerability that allows an attacker to execute code on the file system...