CVE-2020-12141

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmpberdecodestringlenbuffer in os/net/app-layer/snmp/snmp-ber.c...

CVE-2020-12141

CVE-2020-12141 affects Contiki-NG 4.4 and earlier, with an out-of-bounds read in the SNMP stack. The issue can be triggered by crafted SNMP packets that target snmp_ber_decode_string_len_buffer (os/net/app-layer/snmp/snmp-ber.c), enabling denial of service and potential information disclosure. Co...

Contiki 缓冲区错误漏洞

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in the SNMP stack in Contiki NG 4.4 and earlier versions, which stems from. An attacker can exploit the vulnerability to cause a denial of service and potentially disclose...

PT-2021-9442

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.4 and earlier Description The issue is related to an out-of-bounds read in the SNMP stack, allowing an attacker to cause a denial of service and potentially disclose information. This can be achieved via crafted SNMP...

CVE-2020-12141: Out-of-bounds Read

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmpberdecodestringlenbuffer in os/net/app-layer/snmp/snmp-ber.c...

net-snmp:snmp_agent_e2e_fuzzer: Heap-buffer-overflow in get_set_cache

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4680904421801984 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpagente2efuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

CVE-2021-33903

In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CLI does not change the password of the root user for SNMPv3 access. However, changing the password of the root user via LANconfig does change the password of the root user for...

net-snmp:snmp_config_mem_fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=6204827659534336 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpconfigmemfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffff90 Crash State: unsigned long...

WhatsUpGold 21.0.3 Cross Site Scripting

Exploit Title: WhatsUpGold 21.0.3 - Stored Cross-Site Scripting XSS Date: 09.17.2021 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.21.0.3, Build 188 Tested on: Windows 2019 Server CVE : CVE-2021-41318 Reference:...

WhatsUpGold 21.0.3 - Stored Cross-Site Scripting Vulnerability

Exploit Title: WhatsUpGold 21.0.3 - Stored Cross-Site Scripting XSS Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.21.0.3, Build 188 Tested on: Windows 2019 Server CVE : CVE-2021-41318 Reference: https://f20.be/cves/poc-cve-2021-41318 Description:...

WhatsUpGold 21.0.3 - Stored Cross-Site Scripting (XSS)

Exploit Title: WhatsUpGold 21.0.3 - Stored Cross-Site Scripting XSS Date: 09.17.2021 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.21.0.3, Build 188 Tested on: Windows 2019 Server CVE : CVE-2021-41318 Reference:...

CVE-2016-6555

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...

CVE-2016-6556

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This...

CVE-2016-6556

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This...

CVE-2016-6555

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...

Cross site scripting

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This...

Cross site scripting

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...

PT-2021-8426

Name of the Vulnerable Software and Affected Versions OpenNMS versions 18.0.1 and prior Description The issue is related to a stored XSS problem due to insufficient filtering of SNMP trap supplied data. An attacker can create a malicious SNMP trap to store an XSS payload, which will trigger when ...

PT-2021-8427

Name of the Vulnerable Software and Affected Versions OpenNMS versions prior to 18.0.2 Description The issue is related to a stored XSS problem due to insufficient filtering of SNMP agent supplied data. An attacker can create a malicious SNMP sysName or sysContact response to store an XSS payload...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2021-80662)

Cisco IOS XE Software is an operating system from the U.S. company Cisco Cisco. Used as a single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.Cisco IOS XE Software has a denial of service vulnerability...