23265 matches found
CVE-2023-30311
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
CVE-2023-30311
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
SUSE CVE-2021-47544
In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...
CVE-2023-30312
An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...
PT-2024-12227 · Tp Link · Tp-Link Tl-War1200L +5
Name of the Vulnerable Software and Affected Versions: TP-LINK TL-R473GP-AC TP-LINK XDR6020 TP-LINK TL-R479GP-AC TP-LINK TL-R4239G TP-LINK TL-WAR1200L TP-LINK TL-R476G Description: An issue in the listed TP-LINK routers allows attackers to hijack TCP sessions, potentially leading to a denial of...
多款Ruijie产品 安全漏洞
Ruijie Networks EG210G-P is a Gigabit PoE router from Ruijie Networks China. A security vulnerability exists in multiple Ruijie products, which stems from a vulnerability that allows an attacker to hijack a TCP session, potentially resulting in a denial of service attack. The following products a...
PT-2024-12225 · Linksys · Linksys E5600
Name of the Vulnerable Software and Affected Versions: Linksys E5600 affected versions not specified Description: An issue in Linksys E5600 routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information about a...
The vulnerability of the MPTCP protocol implementation in Linux kernel’s mptcp_copy_inaddrs() function allows a attacker to cause a service failure.
The vulnerability in the implementation of the MPTCP protocol in Linux kernel relates to the assignment of a zero pointer in the function mptcpcopyinaddrs in the net/mptcp/protocol.c module, during the processing of the list of nested threads when disabling them. Exploiting this vulnerability can...
PT-2024-4005 · D Link · D-Link Di-7003Gv2
Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 affected versions not specified Description: The issue allows attackers to hijack TCP sessions, potentially leading to a denial of service. It is related to incorrect clearance or release of resources, which can be exploited...
PT-2024-12228 · Ruijie · Ruijie Eg105G +3
Name of the Vulnerable Software and Affected Versions: Ruijie EG210G-P affected versions not specified Ruijie EG105G-V2 affected versions not specified Ruijie NBR affected versions not specified Ruijie EG105G affected versions not specified Description: An issue in the mentioned Ruijie routers...
CVE-2023-30312
An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...
360 Safe Router P1 安全漏洞
360 Safe Router P1 is a wireless router from Qihoo Technology Limited 360, a company based in Beijing, China. A security vulnerability exists in 360 Safe Router P1, 360 V6G, 360 T5G, 360 T6M that originates from the router allowing an attacker to hijack a TCP session, which could result in a deni...
PT-2024-12229 · Comfast · Comfast Cf-616Ac
Name of the Vulnerable Software and Affected Versions: Comfast CF-616AC affected versions not specified Description: An issue in Comfast CF-616AC routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information...
PT-2024-12231 · Openwrt · Openwrt
Name of the Vulnerable Software and Affected Versions: OpenWrt versions 18.06 through 22.03 and beyond Description: An issue in OpenWrt allows off-path attackers to hijack TCP sessions. This could lead to a denial of service, impersonating the client to the server, and impersonating the server to...
The vulnerability of the reqsk_queue_alloc() function in the Linux kernel-based TCP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the reqskqueuealloc function in the net/core/requestsock.c module of the Linux kernel’s TCP protocol implementation is related to deficiencies in the serialization mechanism, leading to competitive access to resources. Exploiting this vulnerability could allow a remote attack...
CVE-2021-47544
In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...
CVE-2024-5035
The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated...
CVE-2024-5035 TP-Link Archer C5400X - RFTest Unauthenticated Command Injection
The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated...
CVE-2021-47544
In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...
CVE-2021-47544
In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...