The vulnerability affects the implementation of NAT64 technology for Juniper Networks’ MS-MIC and MS-MPC routers, as well as Junos OS-based MX routers. This allows attackers to cause service interruptions.

The vulnerability of NAT64 technology implemented in Juniper Networks’ MS-MIC and MS-MPC routers for Junos OS operating systems is related to incorrect calculation of buffer size when processing IPv6 and IPv4 packets. Exploiting this vulnerability allows a malicious actor to cause service failure...

pentest-wiki

This is a collection of information gathering tools and techniques for penetration testing and security research. The repository contains various scripts and documentation for gathering information about a target organization, including IP analysis, whois analysis, and social media research. The...

CVE-2021-31970

Windows TCP/IP Driver Security Feature Bypass Vulnerability...

PT-2021-8260 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0 Description: The vulnerability is related to a slab-out-of-bounds read in the fib6 nh flush exceptions function in the Linux kernel's IPv6 routing code. This issue can be exploited to cause a denial of...

USN-4975-1 python-django vulnerabilities

It was discovered that the Django URLValidator function incorrectly handled newlines and tabs. A remote attacker could possibly use this issue to perform a header injection attack. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. CVE-2021-32052 Rasmus Lerchedahl Petersen...

PT-2021-6022 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.3 Description: The issue is related to the implementation of the IPv6 protocol in the Linux kernel, which contains defects and risks associated with the use of certain cryptographic algorithms. This can lea...

Mitsubishi Electric MELSEC iQ-R series 资源管理错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. A resource management error vulnerability exists in the MELSOFT communication port TCP/IP of the CPU unit of the Mitsubishi Electric MELSEC iQ-R Series, where a remote third party maintai...

What is Ping of Death Assault?

Ping of death is a strategy for DoS Denial of Service assault. It’s an attack-type that objectifies the ICMP Internet Control Message Protocol and the TCP Transmission Control Protocol, and is quite possibly the most undermining of all ICMP attacks. The ping of death attack is otherwise called a...

Linux kernel 资源管理错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A resource management error vulnerability exists in cipsov4genopt in net/ipv4/cipsoipv4.c in Linux kernel versions...

What is an IP address? Do I need one?

An IP address tells computers how to find a certain device within a computer network. An IP address is like an address label for information packets. For each network your computer is connected to, it has a unique IP address on that network. So, one device can have several IP addresses at the sam...

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2021-25664

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

CVE-2021-25663

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

CVE-2021-31552

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly executed certain rules related to blocking accounts after account creation. Such rules would allow for user accounts to be created while blocking only the IP address used to create an account and not...

The vulnerability of the implementation of the TCP/IP protocol stack allows a intruder to gain unauthorized access to protected information.

The vulnerability of the TCP/IP protocol stack implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the implementation of the IPv6 TCP/IP stack in the Trace protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPv6 TCP/IP implementation in the Trace stack is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the implementation of the TCP/IP protocol stack allows a attacker to cause a service failure.

The vulnerability of the Stacked Protocols implementation of TCP/IP is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the IPv4/ICMPv4 protocol stack in the Trace TCP/IP implementation allows a attacker to gain unauthorized access to protected information.

The vulnerability of the IPv4/ICMPv4 protocol stack in the TCP/IP stack is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the implementation of the TCP/IP protocol stack for the microprogrammable logic controller Modicon M218 lies in the ability to cause a service failure by writing beyond the buffer memory boundaries.

The vulnerability of the implementation of the TCP/IP protocol stack for the microprogrammable logic controller Modicon M218 lies in the writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the system...