CVE-2024-2359

The CVE concerns parisneo/lollms-webui v9.3. An OS command injection stems from improper neutralization, enabling remote code execution. Affected component: the host/config handling in the runtime; attacker-controlled host via the /update_setting endpoint bypasses the intended protection on /exec...

PT-2024-19951 · Unknown · Parisneo/Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui version 9.3 Description: The issue arises from the application's handling of the "/execute code" endpoint, which is intended to be blocked from external access by default. However, attackers can exploit the "/update...

edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message

A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...

Important: bind and dhcp security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. The Dynamic Hos...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP server service for Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Important: Red Hat Security Advisory: bind and dhcp security update

An update for bind is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

The vulnerability of the DHCP protocol lies in the lack of authentication for the critical function, allowing attackers to manipulate routes to redirect VPN traffic.

The vulnerability of the DHCP protocol lies in the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to remotely manipulate routing mechanisms, thereby redirecting VPN traffic...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

UBUNTU-CVE-2024-3661

DHCP can add routes to a client’s routing table via the classless static route option 121. VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP server service for Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message

A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...

Tenda i21 安全漏洞

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect operation of the parameter dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 that can result in a stack-based buffer overflow...

Tenda W9 安全漏洞

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 that can result in a stack-based buffer...

CVE-2024-26212

DHCP Server Service Denial of Service Vulnerability...

CVE-2024-26202

DHCP Server Service Remote Code Execution Vulnerability...

PT-2024-3300 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory in the DHCP Server Service of Windows operating systems. This can allow a remote attacker to execute arbitrary code. The vulnerability...

PT-2024-3271 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the DHCP Server Service of Windows operating systems. This can be exploited by a remote attacker to cause a denial of...

PT-2024-3299 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory in the DHCP Server Service of Windows operating systems. This can allow a remote attacker to execute arbitrary code. The vulnerability...

CVE-2024-30629

Tenda FH1205 v2.0.0.7775 has a stack overflow vulnerability in the list1 parameter from fromDhcpListClient function...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that stems from a flaw in the...