35 matches found
CVE-2023-20198
CVE-2023-20198 CVE-2023-20198 Checkscript basato su: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Incluso l'aggiornamento in cui è presente un header Authorization per verificare l'impianto noto. !! Aggiornato per cercare l'impianto aggiornato Lo script control...
dissect
dissect Dissect è un framework e set di strumenti per la digital forensics e l'incident response che ti permette di accedere e analizzare rapidamente reperti forensi da vari formati di disco e file, sviluppato da Fox-IT parte di NCC Group. Questo progetto è un meta pacchetto: installerà tutti gli...
qub-network-security-cve-2023-20198
🛡️ qub-network-security-cve-2023-20198 Analyse, Erkennung und Abwehr der Ausnutzung von CVE-2023-20198 in Cisco IOS XE 📘 Queen’s University Belfast – CSC3064 Network Security Assessment 📋 Aufgabenübersicht Dieses Projekt beinhaltet die Analyse von PCAP-Dateien, die von Fox-IT bereitgestellt wurden...
EUVD-2022-50286
Malicious code in bioql PyPI...
EUVD-2022-50287
Malicious code in bioql PyPI...
CVE-2022-47526
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...
CVE-2022-47525
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...
CVE-2022-47526
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...
CVE-2022-47525
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...
CVE-2022-47526
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...
Design/Logic Flaw
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...
Path traversal
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...
CVE-2022-47526
Fox-IT DataDiode (Fox DataDiode) v3.4.3 exposes a path-traversal vulnerability allowing arbitrary file writes and remote code execution in the downstream node user context. Exploitation requires no user interaction and can be achieved over the network with no privileges. Several connected sources...
CVE-2022-47526
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...
CVE-2022-47526
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not...
Fox-IT DataDiode 路径遍历漏洞
Fox-IT DataDiode Fox DataDiode is an IT security product from Fox-IT. It guarantees unidirectional data transfer in real time over fast 1-10Gbps data connections. A security vulnerability exists in Fox-IT DataDiode Fox DataDiode version 3.4.3. An attacker can exploit the vulnerability to execute...
CVE-2022-47525
Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...
Fox-IT DataDiode 数字错误漏洞
Fox-IT DataDiode Fox DataDiode is an IT security product from Fox-IT. It guarantees unidirectional data transfer in real time over fast 1-10Gbps data connections. A security vulnerability exists in Fox-IT DataDiode Fox DataDiode version 3.4.3. An attacker could exploit this vulnerability to cause...
CVE-2022-47525
Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 is affected by a Divide-by-Zero vulnerability in the packet parser. A remote attacker could cause a denial-of-service without user interaction. Exploitation details are not provided in the supplied documents beyond the remote, unauthenticated nature of t...
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...