6609 matches found
CVE-2023-30305
An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
CVE-2023-30311
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
CVE-2023-30311
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
CVE-2024-5415 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to...
PT-2024-12232 · Wavlink · Wavlink Quantum D2G
Name of the Vulnerable Software and Affected Versions: Wavlink QUANTUM D2G routers affected versions not specified Description: An issue in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no...
PT-2024-12230 · H3C · H3C Magic R100 +1
Name of the Vulnerable Software and Affected Versions: H3C Magic R365 affected versions not specified H3C Magic R100 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: For H3C...
PT-2024-12225 · Linksys · Linksys E5600
Name of the Vulnerable Software and Affected Versions: Linksys E5600 affected versions not specified Description: An issue in Linksys E5600 routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information about a...
CVE-2023-30312
An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...
PT-2024-12227 · Tp Link · Tp-Link Tl-War1200L +5
Name of the Vulnerable Software and Affected Versions: TP-LINK TL-R473GP-AC TP-LINK XDR6020 TP-LINK TL-R479GP-AC TP-LINK TL-R4239G TP-LINK TL-WAR1200L TP-LINK TL-R476G Description: An issue in the listed TP-LINK routers allows attackers to hijack TCP sessions, potentially leading to a denial of...
Comfast CF-616AC 安全漏洞
Comfast CF-616AC is a WiFi router from China Four Seas Zonglian Network Technology Comfast. A security vulnerability exists in the Comfast CF-616AC that originates from allowing an attacker to hijack a TCP session, which could lead to a denial of service attack...
PT-2024-4005 · D Link · D-Link Di-7003Gv2
Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 affected versions not specified Description: The issue allows attackers to hijack TCP sessions, potentially leading to a denial of service. It is related to incorrect clearance or release of resources, which can be exploited...
PT-2024-12228 · Ruijie · Ruijie Eg105G +3
Name of the Vulnerable Software and Affected Versions: Ruijie EG210G-P affected versions not specified Ruijie EG105G-V2 affected versions not specified Ruijie NBR affected versions not specified Ruijie EG105G affected versions not specified Description: An issue in the mentioned Ruijie routers...
多款TP-LINK产品 安全漏洞
The TP-LINK TL-R473GP-AC is an all-in-one Gigabit VPN router from China P&L TP-LINK. A security vulnerability exists in multiple TP-LINK products, which stems from a vulnerability that allows an attacker to hijack TCP sessions, potentially resulting in a denial-of-service attack. The following...
PT-2024-12229 · Comfast · Comfast Cf-616Ac
Name of the Vulnerable Software and Affected Versions: Comfast CF-616AC affected versions not specified Description: An issue in Comfast CF-616AC routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information...
PT-2024-12226 · Mercury · Mercury X30G +1
Name of the Vulnerable Software and Affected Versions: Mercury x30g affected versions not specified Mercury YR1800XG affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, which could lead to a denial of service. Recommendations: For Mercury...
GHSA-4QX8-J9VH-2628 silverstripe/framework's User-Agent header not correctly invalidating user session
A security protection device in Session designed to protect session hijacking was not correctly functioning. This function intended to protect user sessions by detecting changes in the User-Agent header, but modifications to this header were not correctly invalidating the user session...
PT-2024-40078 · Session · Session
Name of the Vulnerable Software and Affected Versions: Session affected versions not specified Description: A security protection mechanism in Session, designed to prevent session hijacking, was not functioning correctly. This mechanism aimed to protect user sessions by detecting changes in the...
JA4+ - Suite Of Network Fingerprinting Standards
JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware detection, session...
golang: net/http: insufficient sanitization of Host header
A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...
