Lucene search
+L

4875 matches found

attackerkb
attackerkb
•added 2023/10/10 3:15 a.m.•14 views

CVE-2023-44959

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

8.8CVSS6.2AI score0.22834EPSS
SaveExploits1References2
Prion
Prion
•added 2023/10/10 3:15 a.m.•28 views

Code injection

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

6.5CVSS8.7AI score0.22834EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/10 12:00 a.m.•23 views

CVE-2023-44959

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

7.7AI score0.22834EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•9 views

CVE-2023-44959: Improper Neutralization of Special Elements used in a Command

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

8.8CVSS8.3AI score0.22834EPSS
SaveExploits1References3
VulnCheck KEV
VulnCheck KEV
•added 2023/10/09 12:00 a.m.•15 views

VulnCheck KEV: CVE-2021-36380

Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi...

10CVSS8.5AI score0.97832EPSS
SaveIn wildExploits1References718
GithubExploit
GithubExploit
•added 2023/10/08 7:36 a.m.•397 views

Exploit for CVE-2023-38646

CVE-2023-38646 The original script originates from securezer...

9.8CVSS7.5AI score0.98677EPSS
SaveExploits37
CNVD
CNVD
•added 2023/10/07 12:00 a.m.•18 views

D-Link DAP-1325 IPAddr Stack Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1325 is a wireless network extender made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network and wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a stack buffer overflow remote code...

8.8CVSS8.9AI score0.00933EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/10/06 6:15 p.m.•15 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS5.9AI score0.00416EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2023/10/06 6:15 p.m.•35 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

5.5CVSS6.7AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/10/06 6:15 p.m.•38 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS6.6AI score0.00416EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/10/06 5:43 p.m.•69 views

CVE-2023-5366 Openvswitch don't match packets on nd_target field

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS7AI score0.00416EPSS
SaveExploits0References6
Veracode
Veracode
•added 2023/10/06 8:42 a.m.•24 views

Improper Authorization

pretix is vulnerable to Improper Authorization. An attacker is able to exploit this vulnerability by sending a specially crafted HTTP request to a vulnerable pretix instance. This request could contain a malicious X-Forwarded-For header that spoofs the attacker's IP address. If the pretix instanc...

5.3CVSS6.7AI score0.00637EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2023/10/02 9:30 p.m.•32 views

pretix potential IP address spoofing vulnerability

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

5.3CVSS6.8AI score0.00637EPSS
SaveExploits0References8Affected Software1
Prion
Prion
•added 2023/10/02 8:15 p.m.•20 views

Code injection

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

5CVSS5.2AI score0.00637EPSS
SaveExploits0References5Affected Software1
osv_pysec
osv_pysec
•added 2023/10/02 8:15 p.m.•42 views

PYSEC-2023-187

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

5.3CVSS6.8AI score0.00637EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2023/10/02 12:00 a.m.•25 views

CVE-2023-44463

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

5.3CVSS7AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2023/10/02 12:00 a.m.•40 views

CVE-2023-44463

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

5.4AI score0.00637EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/10/02 12:00 a.m.•11 views

CVE-2023-44463

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

6.7AI score0.00637EPSS
SaveExploits0References5
CVE
CVE
•added 2023/10/02 12:00 a.m.•89 views

CVE-2023-44463

CVE-2023-44463 affects pretix versions before 2023.7.1. The issue arises from incorrect parsing of configuration files, causing the application to trust unchecked X-Forwarded-For headers even when not configured to do so. This can enable IP address spoofing by users of the application and may aff...

5.3CVSS5.1AI score0.00637EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/02 12:00 a.m.•3 views

CVE-2023-44463: Authentication Bypass by Spoofing

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...

5.3CVSS5.9AI score0.00637EPSS
SaveExploits0References2
Rows per page
Query Builder