The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to induce a service failure.

The vulnerability of DNS-client TCP/IP implementations like NicheLite and InterNiche involves an escape from the expected range of values for certain indicators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2020-20486

IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...

MZ Automation lib60870 安全漏洞

MZ Automation lib60870 is MZ Automation's lib60870 library based on the IEC 60870-5 protocol. A security vulnerability exists in MZ Automation lib60870 that stems from a denial of service vulnerability in the ASDU message handling feature in version 2.2.0. A specially crafted network request coul...

The vulnerability of the Modbus protocol implementation in microprogrammed software for programmable logic controllers like Modicon Quantum allows a intruder to trigger malfunctions in the equipment or unauthorized changes to its configuration.

The vulnerability of the Modbus protocol implementation in microprogrammed logic controllers like Modicon Quantum is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to cause service failures or unauthorized changes to the PLC’s configuration...

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability...

CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

CVE-2021-33757

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Video Surveillance devices of the 7000 series allows a intruder to induce slow memory leaks, restart the device, or cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Video Surveillance devices of the 7000 series relates to a memory leak. Exploiting this vulnerability can allow an attacker to cause a slow memory leak, a device reboot, or a service failure...

how to protect for weird erc20 tokens

Handle gpersoon Vulnerability details Impact The protocol only works as expected when the ERC20 tokens are well behaved. If rebasing tokens or malicious token contracts are used then unexpected results can happen. I don't see any code to restrict the tokens or verify the tokens. Proof of Concept...

CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

dhcp: stack-based buffer overflow when parsing statements with colon-separated hex digits in config or lease files in dhcpd and dhclient

A flaw was found in the Dynamic Host Configuration Protocol DHCP. There is a discrepancy between the code that handles encapsulated option information in leases transmitted "on the wire" and the code which reads and parses lease information after it has been written to disk storage. This flaw...

SUSE: Security Advisory (SUSE-SU-2014:1512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens SIMATIC OPC UA 安全漏洞

The Siemens SIMATIC CP443-1 OPC UA9 is a communication processor from Siemens, Germany. A security vulnerability exists in OPC UA. The vulnerability stems from the program's susceptibility to uncontrolled recursion, which can be exploited by an attacker to trigger a stack overflow...

The vulnerability of the JunOS operating system’s SRX series routers’ implementation of the Internet Content Adaptation Protocol (ICAP) allows attackers to enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the Internet Content Adaptation Protocol ICAP implementation in JunOS router operating systems is related to a re-release mechanism. Exploiting this vulnerability allows an attacker to enhance their privileges, execute arbitrary code, or cause service failures...

Microsoft Windows tcp/ip 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. A TCP/IP information disclosure vulnerability exists in Microsoft Windows and...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Small Business RV series routers allows a attacker to trigger a device reboot.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business RV series routers is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot remotely...

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack allows a attacker to cause a service failure.

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Netgear NETGEAR JGS516PE 授权问题漏洞

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An authentication bypass vulnerability exists in the NSDP protocol implementation of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker could exploit this vulnerability to bypass access control and take full...

The vulnerability in the implementation of the ISN generator for the TI-NDKTCPIP protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the TI-NDKTCPIP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the implementation of the ISN generator for the PicoTCP protocol stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the PicoTCP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...