4498 matches found
H3C Magic R230 security vulnerabilities
Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the Magic R230 V100R002 of Xinhua San Technologies Co. The vulnerability stems from a hard-coded password vulnerability in /etc/shadow, which can be exploited by an attacker to log in as root...
CVE-2024-38903
The H3C Magic R230 wireless router, specifically version V100R002 , is susceptible to a vulnerability where the udpserver opens port 9034 . This flaw allows an attacker to execute arbitrary commands on the device. As a temporary workaround until a formal patch is released, it is recommended to re...
CVE-2024-38902
H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-38903
H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...
AEGON LIFE 1.0 Remote Code Execution
Exploit Title: Life Insurance Management System- Unauthenticated Remote Code Execution RCE Exploit Author: Aslam Anwar Mahimkar Date: 18-05-2024 Category: Web application Vendor Homepage: https://projectworlds.in/ Software Link: https://projectworlds.in/life-insurance-management-system-in-php/...
io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +18 more potentially affected by CVE-2024-1722 via org.keycloak:keycloak-services (22.0.0)
org.keycloak:keycloak-services MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...
ROS-20240611-02
The vulnerability of Tss2RCDecode and Tss2RCSetHandler functions of TCG TPM2 TPM2 Software Stack implementation is related to buffer copying without input data validation. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, violate its integrity, and cause ...
io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +18 more potentially affected by CVE-2024-4540 via org.keycloak:keycloak-services (22.0.0)
org.keycloak:keycloak-services MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...
Arbitrary Code Execution
yiisoft/yii2 is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper validation in the set magic function when attaching behaviors to components, allowing instantiation of arbitrary classes if attacker-controlled input is provided...
Trackpad on the latest Magic Keyboards for iPad Pro M4 is not compatible with the CWA for iOS
The trackpad on the latest Magic Keyboards for the new iPad Pro M4 11-inch and 13-inch is currently not compatible with the Citrix Workspace app on iOS...
CVE-2023-30311
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
CVE-2023-30311
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
PT-2024-12230 · H3C · H3C Magic R100 +1
Name of the Vulnerable Software and Affected Versions: H3C Magic R365 affected versions not specified H3C Magic R100 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: For H3C...
CVE-2023-30311: Uncontrolled Resource Consumption
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
H3C Magic R100 security vulnerabilities
H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100, H3C Magic R365, which stems from a vulnerability that allows an attacker to hijack a TCP session, which could lead to a denial of service attack...
Exploit for CVE-2024-0230
cve-2024-0230-blue Helper script to...
OESA-2024-1613 tpm2-tss security update
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 system APIs which provides TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers. Security Fixes: A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number i...
Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management
We are pleased to announce that Microsoft has been recognized as a Leader in the Gartner® Magic Quadrant™ for Security Information and Event Management SIEM.1 We believe our position in the Leaders quadrant validates our vision and continued investments in Microsoft Sentinel making it a...
Rapid7 Recognized in the 2024 Gartner® Magic Quadrant™ for SIEM
Command Your Attack Surface with a next-gen SIEM built for the Cloud First Era Rapid7 is excited to share that we are named a Challenger for InsightIDR in the 2024 Gartner Magic Quadrant for SIEM. In a crowded and constantly changing space, this is our sixth time to be recognized in the report...
Rapid7 Recognized in the 2024 Gartner® Magic Quadrant™ for SIEM
Command Your Attack Surface with a next-gen SIEM built for the Cloud First Era Rapid7 is excited to share that we are named a Challenger for InsightIDR in the 2024 Gartner Magic Quadrant for SIEM. In a crowded and constantly changing space, this is our sixth time to be recognized in the report...