Unauthorized Access Vulnerability in Lock Group Management System

Ltd. is a high-tech enterprise specializing in the development, production and sales of passive intelligent locks and intelligent lock group management system. An unauthorized access vulnerability exists in the Lock Group Management System. Attackers use this vulnerability to forge cookies to...

SQL Injection Vulnerability in Lock Group Management System v2.0

Ltd. is a high-tech enterprise specializing in the development, production and sales of passive intelligent locks and intelligent lock group management system. The Lock Group Management System v2.0 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

The vulnerability of IGMP-based real-time operating system implementations in Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMP-based real-time operating system implementations by Wind River and VxWorks is related to the use of a zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

User has access to project and repository after global permission has been removed

h3. Problem User has access to project and repository after global permission has been removed. Conversely, a user in this affected state will be greeted with "permission denied" even after the global permission has been re-granted to the user. h3. Environment - Tested on 7.5 and 7.3 h3. Steps to...

CVE-2020-3569

Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol IGMP process or make it consume available memory and eventually cras...

Vulnerability fixed in Cisco IOS XR

Cisco has fixed a vulnerability in the Distance Vector Multicast Routing Protocol DVMRP functionality in IOS XR. The vulnerability allows an unauthenticated remote malicious person able to cause a Denial-of-Service on the vulnerable device. To do so, the malicious party needs to send rogue IGMP...

VulnCheck KEV: CVE-2020-3569

Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...

VulnCheck KEV: CVE-2020-3566

Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...

PT-2020-3783 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to the incorrect handling of IGMP packets in the Distance Vector Multicast Routing Protocol DVMRP feature, which could allow an unauthenticated, remote...

PT-2020-3782 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software, which could allow an unauthenticated, remote attacker to exhaust...

HackerOne: Near to Infinite loop when changing Group's name that has API token as Team Member

Summary: The https://hackerone.com contains an iteration or loop with an exit condition that is near to infinite loop. If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory and even a DoS attack. Description: Hello...

Wind River Systems VxWorks IGMP Component Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc.IGMP is one of the Internet Group Management Protocol components. A code issue vulnerability exists in the IGMP component of Wind River Systems VxWorks. The vulnerability arises from an improper...

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a hacker to access confidential information.

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks involves exposing IGMP information through a special report. Exploiting this vulnerability can allow attackers to access confidential information...

CVE-2016-10905

A flaw was found in the resource group management of the GFS2 filesystem. A local attacker can use this flaw to cause a use-after-free error, which can be used to crash the system, corrupt memory, or escalate privileges. Mitigation At this time there is no known mitigation for this flaw, but...

The vulnerability of D-Link router microprogramming software arises from insufficient validation of input data, allowing attackers to circumvent the separation between the host network and the guest network.

The vulnerability of D-Link router microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to circumvent the separation between the host network and the guest network using the IGMP protocol...

Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2)

Exploit Title: Alkacon OpenCMS 10.5.x - Multiple XSS in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5 / 10.5.4 CVE :...

D-Link DIR-825 Cross-Router Hidden Channel Vulnerability

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A cross-router hidden channel vulnerability exists in the D-link DIR-825 G1. The vulnerability stems from insufficient isolation between host and client networks established by the same device. The vulnerability can be...

CVE-2019-12265

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report...