PT-2023-33371 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. This problem was introduced in version v5.3 and is fixed in Linux Kernel version...

PT-2023-33237 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2023-10234 · Unknown · Picturethiswebserver

Name of the Vulnerable Software and Affected Versions: PictureThisWebServer affected versions not specified Description: A critical issue affects the function router.post of the file routes/user.js. The manipulation of the arguments username and password leads to sql injection. Recommendations:...

CVE-2023-22393

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon RPD crash by sending a BGP route with invalid next-hop resulting in a Denial of Service DoS. Continue...

CVE-2023-22393

CVE-2023-22393 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an improper check during BGP route processing that allows an attacker to trigger a crash of the Routing Protocol Daemon (RPD) by sending a BGP route with an invalid next-hop, causing a Denial of Service (DoS). The...

CVE-2023-22393 Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon RPD crash by sending a BGP route with invalid next-hop resulting in a Denial of Service DoS. Continue...

Paid Membership Pro < 2.9.8 - Unauthenticated SQLi

The plugin does not properly sanitise and escape the code parameter before using it in a SQL statement via the /pmpro/v1/order REST route, leading to a SQL injection exploitable by unauthenticated users PoC curl...

PT-2023-3054 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.1 through 21.1R3-S4 Juniper Networks Junos OS versions 21.2 through 21.2R3-S3 Juniper Networks Junos OS versions 21.3 through 21.3R3-S2 Juniper Networks Junos OS versions 21.4 through 21.4R2-S2, 21.4R3...

PT-2022-7050 · WordPress · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro WordPress Plugin versions prior to 2.9.8 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability is located in the code parameter of the "/pmpro/v1/order" REST route. It may...

CVE-2022-46546

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic...

PT-2022-36238 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to a warning in the ip6 route net exit late function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.26 and fixed...

PT-2022-36510 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to a warning in the ip6 route net exit late function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

The vulnerability of the SetStaticRouteIPv6Settings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetStaticRouteIPv6Settings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure of the system to properly validate the input data entered by the user when processing the StaticRouteIPv6List element. Exploiti...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A cross-site request forgery vulnerability exists in the Optilink Network OP-XT71000N version V2.2, which originates from a vulnerability that could allow an unauthenticated, remote attacker to implement cross-site...

PT-2022-27130 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version V15.03.05.18 Description: The issue is related to a Buffer Overflow that can be triggered via the fromSetRouteStatic function. Recommendations: For Tenda AC15 version V15.03.05.18, at the moment, there is no information abo...

CVE-2022-3948

A vulnerability classified as critical was found in eolinker gokulite. This vulnerability affects unknown code of the file /plugin/getList. The manipulation of the argument route/keyword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and...

PT-2022-24972 · Unknown · Eolinker Goku Lite

Name of the Vulnerable Software and Affected Versions: eolinker goku lite affected versions not specified Description: A critical issue has been found in eolinker goku lite, affecting an unknown part of the file /balance/service/list. The manipulation of the route/keyword argument leads to SQL...

PT-2022-24973 · Unknown · Eolinker Goku Lite

Name of the Vulnerable Software and Affected Versions: eolinker goku lite affected versions not specified Description: A critical issue was found in the software, affecting the /plugin/getList file. The manipulation of the route/keyword argument leads to SQL injection. The attack can be initiated...

kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...

kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...