Carrier LenelS2 HID Mercury access panels 安全漏洞

Carrier LenelS2 HID Mercury access panels is a controller panel from Carrier, U.S.A. A security vulnerability exists in Carrier LenelS2 HID Mercury access panels, which could be exploited by an attacker to send specially crafted network packets to remove a user from the web interface. user...

The vulnerability of the DHCPv6 DNS-server implementation by Dnsmasq allows a attacker to cause a service failure.

The vulnerability of the DHCPv6 DNS-server implementation by Dnsmasq is related to a memory management error after memory is freed. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by sending specially crafted packets...

The vulnerability of the evaluation function of the intrusion detection rules of the Snort system’s microprogramming software for Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.

The vulnerability of the evaluation function of the intrusion detection rules of Cisco Firepower Threat Defense FTD is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using specially created UDP packets...

WinAPRS 安全漏洞

WinAPRS is a multifaceted system for packet radios in Hams that allows monitoring of real-time geographic information such as vehicle location, weather status, radio direction finding, and more. It involves maps, GPS tracking, packet radios and more. A security vulnerability exists in WinAPRS...

CVE-2022-24700

WinAPRS 2.9.0 is affected by a buffer overflow in the DIGI address processing of VHF KISS AX.25 packets, which could allow a remote attacker to cause a denial of service (daemon crash). The issue is caused by improper handling in the DIGI address processing path. Remediation: there is no publicly...

CVE-2022-24702

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-24702

CVE-2022-24702 affects WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component can allow remote code execution via malicious AX.25 packets over the air. All sources note the vulnerability impacts products no longer supported by the maintainer. Connected documents do not provide a patched v...

CVE-2022-24702

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2022-16814 · Winaprs · Winaprs

Name of the Vulnerable Software and Affected Versions: WinAPRS version 2.9.0 Description: An issue was discovered in the VHF KISS TNC component, allowing a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. This issue only affects products that are no longe...

RHEL 8 : kernel-rt (RHSA-2022:4835)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4835 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library involves copying buffers without checking the size of the input data during DNS packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Buffer over-flow in Pillow

When reading a TGA file with RLE packets that cross scan lines, Pillow reads the information past the end of the first line without deducting that from the length of the remaining file data. This vulnerability was introduced in Pillow 9.1.0, and can cause a heap buffer overflow. Opening an image...

EulerOS 2.0 SP3 : kernel (EulerOS-SA-2022-1735)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the group key handshake, allowing an attacker...

Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces. With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to...

Huawei EulerOS: Security Advisory for libreswan (EulerOS-SA-2022-1738)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

CVE-2019-15699

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 TLS 1.2 packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of t...

CVE-2021-28714

Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...

Lenovo Personal Cloud Storage命令注入漏洞

Lenovo Personal Cloud Storage is a cloud storage platform from Lenovo China.Lenovo Personal Cloud Storage is vulnerable to command injection. An attacker could use the vulnerability to execute operating system commands by sending spoofed packets to the device...

CVE-2022-25161

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with serial number 17X or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with...