CVE-2022-41019

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

PT-2023-13949 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue is related to stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary comma...

Windscribe VPN 代码问题漏洞

Windscribe VPN is an application from Windscribe Canada. A VPN. Windscribe VPN suffers from a security vulnerability that stems from loading an OpenSSL configuration file from an insecure location...

The vulnerability of the Remote Desktop VPN server’s remote access service allows a hacker to execute arbitrary commands.

The vulnerability of the Remote Desktop VPN server’s remote access service is related to operations that occur outside of the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

Debian DSA-5307-1 : libcommons-net-java - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5307 advisory. ZeddYu Lu discovered that the FTP client of Apache Commons Net, a Java client API for basic Internet protocols, trusts the host from PASV response by default. A malicious...

Debian dla-3251 : libcommons-net-java - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3251 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3251-1 [email protected] https://www.debian.org/lts/security/...

The vulnerability of the SSL-VPN portal of the operating system FortiOS allows a hacker to execute arbitrary code.

The vulnerability of the SSL-VPN portal’s operating system FortiOS is related to a buffer overflow issue. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of SSL VPN configuration loading mechanisms of Sophos firewalls allows attackers to execute arbitrary code.

The vulnerability of SSL VPN configuration loading on Sophos firewalls lies in the possibility of code injection. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Zyxel USG/ZyWALL 跨站脚本漏洞

Zyxel USG/ZyWALL is a firewall from China Heqin Zyxel. A security vulnerability exists in Zyxel USG/ZyWALL versions prior to V4.73, VPN versions prior to V5.32, USG FLEX versions prior to V5.32, and ATP versions prior to V5.32, which stems from a Cross-Site Scripting XSS vulnerability in a CGI...

GHSA-CGP8-4M63-FHH5 Apache Commons Net vulnerable to information leakage via malicious server

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

DEBIAN-CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

Design/Logic Flaw

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

UBUNTU-CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

Apache Commons Net 输入验证错误漏洞

Apache Commons Net is the United States Apache Apache company a library. It implements many of the basic Internet Protocol clients. An input validation error vulnerability exists in Apache Commons Net versions prior to 3.9.0, which stems from the fact that the Net's FTP client trusts a host from ...

CVE-2022-3226

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA...

PT-2022-5774 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 19.5 GA Description: The issue allows for OS command injection, enabling the execution of code via SSL VPN configuration uploads. This can be exploited by a remote attacker to execute arbitrary code...

Mitsubishi Electric GOT2000

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: GOT2000 Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition by...