EUVD-2026-45194

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

EUVD-2020-24488

Malware in sbrugna...

CVE-2023-26431

IPv4-mapped IPv6 addresses did not get recognized as "local" by the code and a connection attempt is made. Attackers with access to user accounts could use this to bypass existing deny-list functionality and trigger requests to restricted network infrastructure to gain insight about topology and...

The vulnerability of the implementation of the Link Layer Topology Discovery Protocol (LLTD) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Link Layer Topology Discovery Protocol LLTD implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted network packet...

CVE-2024-30074

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30074

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30075

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30075

CVE-2024-30075 is a Windows LLTD (Link Layer Topology Discovery Protocol) Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.0 with a vector of AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating an adjacent-network exploit with required user interaction and high impact on confidential...

CVE-2024-30074 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

...

CVE-2024-30074

Technical details for CVE-2024-30074 are not publicly available in the provided connected documents. Affected product/component/versions and remediation are not specified here. Monitor updates from Microsoft MSRC and CVE databases for confirmed exploitability, fixes, and affected configurations.

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

...

KB5039274: Windows Server 2008 R2 Security Update (June 2024)

The remote Windows host is missing security update 5039274. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability CVE-2024-30080 - Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability CVE-2024-3007...

KB5039266: Windows Server 2008 Security Update (June 2024)

The remote Windows host is missing security update 5039266. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability CVE-2024-30080 - Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability CVE-2024-3007...

Microsoft Windows Link Layer Topology Discovery Protocol Security Vulnerability

Microsoft Windows is a suite of operating systems for personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Link Layer Topology Discovery Protocol. An attacker could exploit the vulnerability to remotely execute code. Windows Server 2008 for...

DEBIAN-CVE-2023-52450

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upifilltopology Get logical socket id instead of physical id in discoverupitopology to avoid out-of-bound access on 'upi = &type-topologynididx;' line that leads to NUL...

CVE-2023-48379

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution (CVE-2020-3217)

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

Input Validation Error Vulnerability in Multiple Cisco Products (CNVD-2020-31966)

Cisco NX-OS Software and others are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco IOS is an operating system developed for its network devices.IOS XE is an operating system developed for its network devices.Cisco...

CVE-2020-3217

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

Stack overflow

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...