800 matches found
CVE-2024-51179
CVE-2024-51179 : La inundación de paquetes manipulados por un atacante puede bloquear UPF/SMF en Open5gs Descripción de la vulnerabilidad Descripción: Un problema en Open5GS v.2.7.1 permite a un atacante remoto provocar una denegación de servicio a través de las funciones de red virtualizadas NFV...
ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization
Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet. id: CVE-2020-28653 info: name: ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization author: iamnoooob,pdresearch severity:...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway
A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...
FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...
CVE-2026-98357
In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone hands ISTATESENDTASKMGTRSP, ISTATESENDREJECT and ISTATESENDTEXTRSP completions off to isertcompwq and returns. The work item then...
CVE-2019-0708
Me voy mañana a una boda, si no encuentro nada, que alguien más tome las riendas Voy a publicar el PoC del crash aquí el viernes si aún no hay uno público... Quizá la semana siguiente, dependiendo de si los números vulnerables bajan de forma consistente o no. https://vimeo.com/339425966 No soy...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: nvmet-tcp: bounds checks were added in nvmettcpbuildpduiovec. The nvmettcpbuildpduiovec function could exceed the range of cmd-req.sg when the PDU length or offset exceeds sgcnt, and then use absurd values for sg-length/offset...
FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU
A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units PDUs u...
FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU
A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit PDU serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of...
FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway
A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...
FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...
CVE-2022-33174
CVE-2022-33174 Powertek PDU身份绕过 Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-33174.py -u http://127.0.0.1 python3 CVE-2022-33174.py -f ip.txt Link...
Rocky Linux 9 [CIQ] Security Update: lldpd / lldpd-debuginfo / lldpd-debugsource / lldpd-devel Multiple Vulnerabilities (crlsa-2024_9158)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249158 advisory. lldp/openvswitch: denial of service via externally triggered memory leak CVE-2020-27827 lldpd: out-of-bounds read when decoding SONMP packets CVE-2021-4361...
[SECURITY] [DLA 4804-1] libsmpp34 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4804-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 30, 2026 https://wiki.debian.org/LTS -...
AlmaLinux 9.2 [TuxCare] Security Update: lldpd / lldpd-devel (ALMALINUX9.2:CLSA-2025:1758729003)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758729003 advisory. - An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can...
openSUSE 16: libosmo-hnbap-devel / libosmo-hnbap0 / libosmo-ranap-devel / etc (openSUSE-SU-2026:21954-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21954-1 advisory. Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607. Tenable has extracted the preceding description block direct...
Security update for osmo-iuh (important)
openSUSE security update: security update for osmo-iuh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21954-1 Rating: important References: bsc1281607 Cross-References: CVE-2026-75894 Affected Products: openSUSE Leap 16.0...
