Lucene search
+L

3648 matches found

Kitploit
Kitploit
added 2023/05/11 12:30 p.m.25 views

Indicator-Intelligence - Finds Related Domains And IPv4 Addresses To Do Threat Intelligence After Indicator-Intelligence Collects Static Files

Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files. Done Related domains, IPs collect Installation From Source Code You can use virtualenv for package dependencies before installation. git clone...

7.3AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/05/09 10:4 a.m.5 views

kernel: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctlfibmultipathhashpolicy. While reading sysctlfibmultipathhashpolicy, it can be changed concurrently. Thus, we need to add READONCE to its readers...

4.7CVSS6.3AI score0.00185EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/05/09 10:1 a.m.9 views

kernel: out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c

An out-of-bounds memory read flaw was found in the Linux kernel. The IPv4 Handler component may delete IPv4 routes containing a multipath spec while the fibinfo is using a nexthop object. This issue allows a local attacker access to unauthorized data...

4.3CVSS6.6AI score0.03998EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.29 views

PT-2025-8523 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around the sysctl igmp llm reports variable in the Linux kernel. This occurs because the variable can be changed concurrently while being read, potentially...

8.8CVSS7.2AI score0.13707EPSS
SaveExploits13References501
OSV
OSV
added 2023/05/05 12:10 p.m.16 views

SUSE-SU-2023:2110-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Update to upstrem tag jdk-17.0.7+7 April 2023 CPU Security fixes: - CVE-2023-21930: Fixed AES support bsc1210628. - CVE-2023-21937: Fixed String platform support bsc1210631. - CVE-2023-21938: Fixed runtime support bsc1210632. -...

7.4CVSS5.8AI score0.02495EPSS
SaveExploits1References16
OSV
OSV
added 2023/04/27 2:9 p.m.31 views

CLSA-2023-1682604577 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

7.8CVSS7AI score0.05095EPSS
SaveExploits17References1
The Hacker News
The Hacker News
added 2023/04/27 11:45 a.m.39 views

LimeRAT Malware Analysis: Extracting the Config

Remote Access Trojans RATs have taken the third leading position in ANY. RUN's Q1 2023 report on the most prevalent malware types, making it highly probable that your organization may face this threat. Though LimeRAT might not be the most well-known RAT family, its versatility is what sets it...

7AI score
SaveExploits0
Rockylinux
Rockylinux
added 2023/04/06 3:52 p.m.20 views

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

6.7AI score
SaveExploits0
NVD
NVD
added 2023/04/04 4:15 p.m.32 views

CVE-2023-28613

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...

9.8CVSS7.5AI score0.01162EPSS
SaveExploits0References4
Prion
Prion
added 2023/04/04 4:15 p.m.26 views

Integer overflow

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...

7.5CVSS9.5AI score0.01162EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/04/04 12:0 a.m.10 views

CVE-2023-28613

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...

6.8CVSS9.8AI score0.01162EPSS
SaveExploits0References4
CVE
CVE
added 2023/04/04 12:0 a.m.82 views

CVE-2023-28613

CVE-2023-28613 affects Samsung Exynos hardware: Exynos 1280, Exynos 2200, and Exynos Modem 5300. The issue is an integer overflow in IPv4 fragment handling during reassembly caused by insufficient parameter validation. The connected records confirm the affected components and root cause but do no...

9.8CVSS9.5AI score0.01162EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/04 12:0 a.m.11 views

PT-2023-21847 · Samsung · Exynos Modem 5300 +2

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300 Description: An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor. An integer overflow in IPv4...

9.8CVSS9.4AI score0.01162EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2023/04/04 12:0 a.m.38 views

CVE-2023-28613

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments...

6.8CVSS9.8AI score0.01162EPSS
SaveExploits0References4
OSV
OSV
added 2023/03/29 7:15 p.m.12 views

CVE-2022-43626

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS6.1AI score0.01085EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/29 7:15 p.m.12 views

CVE-2022-43627

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS6.1AI score0.01085EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.72 views

Security Bulletin: Potential DOS due to weak IPv4 and IPv6 sequence numbers in SAN Volume Controller and Storwize Family (CVE-2011-3188)

Summary Security Bulletin: Potential DOS due to weak IPv4 and IPv6 sequence numbers in SAN Volume Controller and Storwize Family CVE-2011-3188 Vulnerability Details Security Bulletin --- Summary --- Potential DOS due to weak IPv4 and IPv6 sequence numbers Vulnerability Details --- CVEID:...

9.1CVSS8.8AI score0.05798EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/03/29 12:0 a.m.10 views

D-Link DIR-1935 操作系统命令注入漏洞

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that stems from a process not properly validating before executing a system call with a user-supplied string when parsing sub-elements within ...

6.8CVSS6.7AI score0.01085EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/23 5:15 p.m.31 views

CVE-2023-20027

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper reassembly of large packe...

8.6CVSS8.4AI score0.0098EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/23 5:15 p.m.25 views

Input validation

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper reassembly of large packe...

5CVSS8.2AI score0.0098EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder