544 matches found
CVE-2023-35756
D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...
CVE-2023-35731
D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...
The vulnerability of the L2/L3 operating system management service of ArubaOS allows a hacker to execute arbitrary code.
The vulnerability of the L2/L3 operating system management service of ArubaOS lies in the fact that operations occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets to port 8211...
CVE-2024-33513
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service...
CVE-2024-26304
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of this...
PT-2024-25287 · Unknown · Ap Management Service
Name of the Vulnerable Software and Affected Versions: AP Management service affected versions not specified Description: Unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities resul...
Aruba Networks ArubaOS 安全漏洞
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from an unauthenticated denial of service vulnerabili...
Aruba Networks ArubaOS 安全漏洞
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, USA. A security vulnerability exists in Aruba Networks ArubaOS that originates from a buffer overflow in the underlying L2/L3...
PT-2024-3205
Name of the Vulnerable Software and Affected Versions ArubaOS versions prior to the fixed version Description The issue is related to a buffer overflow vulnerability in the underlying L2/L3 Management service. This vulnerability could lead to unauthenticated remote code execution by sending...
CVE-2024-26216
Windows File Server Resource Management Service Elevation of Privilege Vulnerability...
Microsoft Windows File Server Resource Management Service 安全漏洞
Microsoft Windows File Server is a server role of Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows File Server Resource Management Service. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows...
PT-2024-3312 · Microsoft · Windows File Server Resource Management Service +1
Name of the Vulnerable Software and Affected Versions: Windows File Server Resource Management Service affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows File Server Resource Management Service. It is caused by incorrect...
CVE-2024-2482
A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /checkavailability.php of the component HTTP POST Request Handler. The manipulation of the argument oldpassword lea...
CVE-2024-2483
CVE-2024-2483 affects Surya2Developer Hostel Management Service 1.0, specifically the Password Change Handler’s /change-password.php. The root cause is manipulation of the oldpassword parameter, enabling Cross-Site Request Forgery (CSRF). Attacks are described as remote, with the exploit publicly...
CVE-2024-2482
CVE-2024-2482 affects Surya2Developer Hostel Management Service 1.0, via the HTTP POST Request Handler in the file /check_availability.php. The vulnerability arises from manipulation of the argument named oldpassword, causing an observable response discrepancy. Impact details in the provided sour...
CVE-2024-2482 Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy
A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /checkavailability.php of the component HTTP POST Request Handler. The manipulation of the argument oldpassword lea...
PT-2024-20596 · Unknown · Surya2Developer Hostel Management Service
Name of the Vulnerable Software and Affected Versions: Surya2Developer Hostel Management Service version 1.0 Description: A problematic issue has been found in the Password Change Handler component, specifically affecting the /change-password.php file. The manipulation of the oldpassword argument...
Surya Developer Hostel Management Service Security Vulnerability
Surya Developer Hostel Management Service is an accommodation management service from Surya Developer India. A security vulnerability exists in version 1.0 of Surya Developer Hostel Management Service, which stems from a significant response difference in the parameter oldpassword of the file...
Surya Developer Hostel Management Service Access Control Error Vulnerability
Surya Developer Hostel Management Service is an accommodation management service from Surya Developer India. An access control error vulnerability exists in Surya Developer Hostel Management Service version 1.0, which stems from an access control error vulnerability in the file...