CVE-2021-3254

Asus DSL-N14U-B1 1.1.2.3805 allows remote attackers to cause a Denial of Service DoS via a TCP SYN scan using nmap...

PT-2022-3861

Name of the Vulnerable Software and Affected Versions Asus DSL-N14U-B1 version 1.1.2.3 805 Description The issue is related to an uncontrolled resource consumption in the Asus DSL-N14U Wi-Fi router's firmware, allowing remote attackers to cause a Denial of Service DoS via a TCP SYN scan using nma...

CVE-2021-3254: Undefined Security Weakness

Asus DSL-N14U-B1 1.1.2.3805 allows remote attackers to cause a Denial of Service DoS via a TCP SYN scan using nmap...

ASUS DSL-N14U-B1 资源管理错误漏洞

The ASUS DSL-N14U-B1 is a router device from Asus China. A denial of service vulnerability exists in the Asus DSL-N14U-B1 version 1.1.2.3805. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited by a remote attacker to cause a denial of service Do...

ESTsoft Alyac PE section headers out of bounds read

Talos Vulnerability Report TALOS-2022-1452 ESTsoft Alyac PE section headers out of bounds read May 10, 2022 CVE Number CVE-2022-21147 SUMMARY An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this...

NewStart CGSL CORE 5.05 / MAIN 5.05 : binutils Multiple Vulnerabilities (NS-SA-2022-0025)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has binutils packages installed that are affected by multiple vulnerabilities: - The bfdcacheclose function in bfd/cache.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier,...

Exploit for Path Traversal in Wso2 Api_Manager

CVE-2022-29464 CVE-2022-29464 POC exploit https://github.com/...

PT-2022-17652

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 16.1.2.2 F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6 F5 BIG-IP versions prior to 13.1.5 F5 BIG-IP versions 12.1.x F5 BIG-IP versions 11.6.x Description A flaw in the Traffic Management...

Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3

The PSIRT received a report about a vulnerability in some gateways for Flexi Soft, Flexi Compact, EFI gateway UE4740, microScan3 and the outdoorScan3. The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. It is recommended to implement the...

Oracle Linux 8 : kernel (ELSA-2022-1550)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1550 advisory. - RDMA/cma: Do not change route.addr.srcaddr.ssfamily Kamal Heib 2032073 2032074 CVE-2021-4028 - netfilter: nftablesoffload: incorrect flow offload...

Backdoor.Win32.Cafeini.b Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/851f8945d1b5923990f4722d627156a0B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Cafeini.b Vulnerability: Port Bounce Scan Description: The malware runs an FTP serve...

PT-2025-8456

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.120 Linux kernel versions prior to 5.15.45 Linux kernel versions prior to 5.17.13 Linux kernel versions prior to 5.18.2 Description A NULL pointer dereference exists in the ath11k spectral scan config functi...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current curl Multiple Vulnerabilities (SSA:2022-117-01)

The version of curl installed on the remote host is prior to 7.83.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-117-01 advisory. - A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data...

VulFi - Plugin To IDA Pro Which Can Be Used To Assist During Bug Hunting In Binaries

The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For cases where a Hexrays...

Stored XSS via Scan Engine Name

Description Scan Engine name is displayed in different places without validation Proof of Concept 1. Add a scan engine with name: 2. Scan a target, Create scheduled tasks 3. Go to https://127.0.0.1/scan/history/scan Note: Try on a private browser if it doesn't execute on the first. I am not sure...

GSD-2022-1001923 jffs2: fix memory leak in jffs2_scan_medium

jffs2: fix memory leak in jffs2scanmedium This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

PT-2022-30179

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns the ext4 file system in the Linux Kernel. It is related to the mb optimize scan performance mount option and its interaction with extents. The actual impact and potential f...

PT-2022-29503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a use after free in the rtw hw scan update probe req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.1 Description The issue is related to a memory overrun and memory leak during the hw scan process. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue concerns the mb optimize scan performance mount option in the ext4 filesystem, which does not work correctly with extents. This problem was introduced in version v5.13 and is...