Atekon AT_NA2000 安全漏洞

The Atekon ATNA2000 is a programmable controller for coal mine switches from Nanda Aotuo Atekon, China. A security vulnerability exists in the Atekon ATNA2000, which stems from insufficient validation of the sequence number range in TCP RST packet processing, which could lead to a denial of servi...

The vulnerability of the implementation subsystem of the SNMP protocol for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the SNMP protocol implementation subsystem in Cisco IOS and Cisco IOS XE operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges and cause...

Ruckus Wireless ICX Switches Allocation of Resources Without Limits or Throttling (CVE-2019-11479)

Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs:...

Ruckus Wireless ICX Switches Uncontrolled Resource Consumption (CVE-2019-11478)

Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs:...

PT-2025-39841

Name of the Vulnerable Software and Affected Versions SunOS Omnios version 5.11 Description An issue allows attackers to cause a Denial of Service DoS by repeatedly sending crafted TCP packets. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

CVE-2024-57412

An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service DoS via repeatedly sending crafted TCP packets...

CVE-2024-57412

SunOS Omnios v5.11 is affected by CVE-2024-57412, where handling crafted TCP packets can cause a Denial of Service. Multiple sources describe a DoS via repeated TCP packets, but no patch/version fix or detailed remediation is provided in the supplied documents. One PT Security entry notes no avai...

PT-2025-39844

Name of the Vulnerable Software and Affected Versions Openindiana, kernel SunOS 5.11 Description The software exhibits a denial of service condition due to improper handling of TCP packets. Specifically, when processing TCP packets with the RST or SYN flag set, the system accepts a wide range of...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling CVE-2022-50053 In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobjectput is safe for module type kobjects CVE-2025-37995 In the Linux kernel,...

CVE-2025-56233

CVE-2025-56233 affects Openindiana kernel SunOS 5.11. TCP processing of RST/SYN allows a wide range of sequence numbers within the receive window, breaking RFC 5961. This can enable an attacker to send multiple random RST/SYN packets and cause denial of service by disrupting legitimate connection...

Noisy Networks, Nosy Neighbors: Inferring Privacy Invasive Information from Encrypted Wireless Traffic

This thesis explores the extent to which passive observation of wireless traffic in a smart home environment can be used to infer privacy-invasive information about its inhabitants. Using a setup that mimics the capabilities of a nosy neighbor in an adjacent flat, we analyze raw 802.11 packets an...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

CVE-2025-20352

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service DoS condition on an affected device that is running Cisco IOS...

CVE-2025-20315

A vulnerability in the Network-Based Application Recognition NBAR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service DoS condition. This vulnerability is due to improper handling of malformed Control...

CVE-2025-21487

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21483

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

CVE-2025-57632

libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs NextCommand, libsmb2 repeatedly calls smb2addiovector to append to a fixed-size iovec array without checking the upper bound of v-niov SMB2MAXVECTORS=256. An attacker can craft responses with many chained PDUs to...

CVE-2025-57632

The CVE-2025-57632 entry concerns libsmb2 6.2+ vulnerable to a Buffer Overflow when processing SMB2 chained PDUs (NextCommand). The root cause is repeated calls to smb2_add_iovector() that append to a fixed-size iovec array without checking the upper bound of v->niov (SMB2_MAX_VECTORS=256). Th...

CVE-2025-59824

The CVE CVE-2025-59824 affects Omni’s WireGuard-based SideroLink used to connect Omni to Talos machines. The issue: the WireGuard interface validates that the source IP matches the Talos peer IPv6 address but does not validate the destination address, meaning a malicious workload on the same Kube...

CVE-2025-20352

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service DoS condition on an affected device that is running Cisco IOS...