Cross site scripting

Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...

CVE-2021-29661

Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...

PT-2021-7996 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the dc link construct function, which can be exploited by a remote attacker to cause a denial of service. The vulnerability is due to the...

The vulnerability in the implementation of the IPv6 protocol in the Trace TCP/IP stack allows a attacker to read arbitrary files.

The vulnerability of the IPv6 implementation in the Trace TCP/IP stack is related to insufficient validation of input data during packet processing. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

The vulnerability of the implementation of the IPv6 protocol in the Trace TCP/IP stack allows a attacker to cause a service failure.

The vulnerability of the IPv6 implementation in the Trace TCP/IP stack is related to insufficient validation of input data during packet processing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

[ASA-202103-2] wireshark-qt: arbitrary code execution

Arch Linux Security Advisory ASA-202103-2 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2021-22191 Package : wireshark-qt Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1669 Summary ======= The package wireshark-q...

Filter Expressions for Wireshark When Using NetScaler Appliance

This article describes how to use filter expression for Wireshark to analyze the network packet trace recorded when using a NetScaler appliance. Filter Expressions for Wireshark NetScaler appliance inserts its own header called NetScaler Packet Trace, in the frame containing NetScaler specific...

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0006)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

PT-2021-8267 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76: mt7915 component in the Linux kernel, where a vulnerability was resolved by properly checking rate info to fix unexpected reporting. The vulnerability...

CVE-2021-21309

creationtimestamp| type| source ---|---|--- 2021-02-27 00:39:52+00:00| seen| https://t.me/cibsecurity/24267...

Trojan-Proxy.Win32.Delf.ai Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1dd6eb39a388f4c8a3eaf248d86aaabc.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Delf.ai Vulnerability: Remote SEH Buffer Overflow Description: The malware listen...

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the improper handling of the search path, allowing attackers to exploit their privileges.

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector is related to incorrect handling of the search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

Oracle Linux 8 : nss (ELSA-2021-0538)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0538 advisory. - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC. Tenable has extracted the preceding...

AgataSoft PingMaster Pro 2.1 - Denial of Service Exploit

Exploit Title: AgataSoft PingMaster Pro 2.1 - Denial of Service PoC Exploit Author: Ismael Nava Vendor Homepage: http://agatasoft.com/ Software Link: http://agatasoft.com/PingMasterPro.exe Version: 2.1 Tested on: Windows 10 Home x64 STEPS Open the program AgataSoft PingMaster Pro In Tools select...

AgataSoft PingMaster Pro 2.1 Denial Of Service

Exploit Title: AgataSoft PingMaster Pro 2.1 - Denial of Service PoC Date: 2021-02-15 Exploit Author: Ismael Nava Vendor Homepage: http://agatasoft.com/ Software Link: http://agatasoft.com/PingMasterPro.exe Version: 2.1 Tested on: Windows 10 Home x64 STEPS Open the program AgataSoft PingMaster Pro...

UBUNTU-CVE-2020-36244

The daemon in GENIVI diagnostic log and trace DLT, is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon versions prior to 2.18.6...

PT-2021-11978 · Genivia · Genivi Diagnostic Log/Trace

Name of the Vulnerable Software and Affected Versions: GENIVI Diagnostic Log and Trace DLT versions prior to 2.18.6 Description: The daemon in GENIVI Diagnostic Log and Trace DLT is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the...

GENIVI Diagnostic Log Buffer Error Vulnerability

GENIVI Diagnostic Log is a communication protocol for the GlobalGENIVI community. Log and Trace interfaces are provided. A buffer error vulnerability exists in GENIVI Diagnostic Log and Trace that originates when a networked system or product performs an operation on memory without properly...

Intel® Trace Analyzer and Collector Advisory

Summary: A potential security vulnerability in the Intel® Trace Analyzer and Collector may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31197 Description: Uncontrolled search path in the Inte...