CVE-2024-20112

In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...

CVE-2024-20112

A security vulnerability exists in MediaTek Chipsets within the isp component due to a missing bounds check . This flaw allows for a possible out-of-bounds read , which could result in a local denial of service . Exploitation of this vulnerability requires System execution privileges and user int...

CVE-2024-10751

CVE-2024-10751 affects Codezips ISP Management System 1.0. The vulnerability is in the file pay.php, where manipulating the “customer” parameter yields a SQL injection. The issue can be exploited remotely, and multiple sources confirm the exploit has been disclosed publicly. Technical details con...

CVE-2024-10751 Codezips ISP Management System pay.php sql injection

A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

CVE-2024-10751 Codezips ISP Management System pay.php sql injection

A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

CVE-2024-10751: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

CVE-2024-20112: Out-of-bounds Read

In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...

PT-2024-16514 · Unknown · Codezips Isp Management System

Name of the Vulnerable Software and Affected Versions: Codezips ISP Management System version 1.0 Description: A critical issue was found in the Codezips ISP Management System, affecting some unknown functionality of the file pay.php. The manipulation of the customer argument leads to SQL...

CVE-2023-48957: Exposure of Sensitive Information to an Unauthorized Actor

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

CVE-2023-48957

CVE-2023-48957 concerns the PureVPN Linux client (2.0.2-Productions) where the DNS query handling is flawed, allowing DNS requests to bypass the VPN tunnel and go directly to the ISP/default DNS servers. The root cause is an improper DNS query handling/control flow in the client, per connected ad...

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates

The China-linked threat actor known as Evasive Panda compromised an unnamed internet service provider ISP to push malicious software updates to target companies in mid-2023, highlighting a new level of sophistication associated with the group. Evasive Panda, also known by the names Bronze Highlan...

Major ISP Accused of Mass Malware Attack on Customers

A major South Korean ISP is accused of installing malware on over 600,000 customers’ PCs to curb torrent…...

MAL-2024-2534 Malicious code in isp-orion-theme (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in isp-orion-theme (npm)

--- -= Per source details. Do not edit below this line.=-...

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

Now-patched authorization bypass issues impacting Cox modems could have been abused as a starting point to gain unauthorized access to the devices and run malicious commands. "This series of vulnerabilities demonstrated a way in which a fully external attacker with no prerequisites could've...

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

More than 600,000 small office/home office SOHO routers are estimated to have been bricked and taken offline following a destructive cyber attack staged by unidentified cyber actors, disrupting users' access to the internet. The mysterious event, which took place between October 25 and 27, 2023,...

SUSE CVE-2023-52660

In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts as IRQFSHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will ha...

UBUNTU-CVE-2023-52660

In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts as IRQFSHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will ha...