3518 matches found
CVE-2024-52015: Buffer Copy without Checking Size of Input
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at bswpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-51011: Buffer Copy without Checking Size of Input
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-50997: Buffer Copy without Checking Size of Input
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
PT-2024-8273 · NetGear · Netgear R6400 +3
Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to a buffer overflow in the wiz pptp.cgi script of Netgear router firmware,...
Massive Git Config Breach Exposes 15,000 Credentials; 10,000 Private Repos Cloned
Cybersecurity researchers have flagged a "massive" campaign that targets exposed Git configurations to siphon credentials, clone private repositories, and even extract cloud credentials from the source code. The activity, codenamed EMERALDWHALE , is estimated to have collected over 10,000 private...
CVE-2024-22066
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...
CVE-2024-22066
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...
CVE-2024-22066
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...
CVE-2024-22066
CVE-2024-22066 affects ZTE ZXR10 ZSR V2 intelligent multi-service router. The vulnerability is a privilege escalation that could enable an authenticated attacker to obtain sensitive device information. Exploitation details, affected versions, and exact root cause are not provided in the available...
ZTE ZXR10 ZSR 安全漏洞
The ZTE ZXR10 ZSR is a wireless router from ZTE Corporation ZTE, China. A security vulnerability exists in the ZTE ZXR10 ZSR version V2. The vulnerability stems from the presence of an elevation of privilege vulnerability, which can be exploited by an authenticated attacker to obtain sensitive...
PT-2024-19180 · Zte · Zte Zxr10 Zsr V2
Name of the Vulnerable Software and Affected Versions: ZTE ZXR10 ZSR V2 intelligent multi service router affected versions not specified Description: The issue is a privilege escalation vulnerability that allows an authenticated attacker to obtain sensitive information about the device...
CVE-2024-22066: Authentication Bypass by Capture-replay
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...
PT-2024-8373
Name of the Vulnerable Software and Affected Versions Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description The issue is related to a stack overflow vulnerability in the pppoe.cgi script, specifically via the pppoe localip parameter. This...
Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7
Summary cURL libcurl, Apache Xerces2 Java, Apache Jena, Spring Framework, json-smart-v1 and json-smart-v2 , libxml2, Apache Standard Taglibs , Apache ActiveMQ, Apache Commons Codec are identified as vulnerable components with multiple reported vulnerabilities, CVE-2022-35260, CVE-2022-42915,...
PT-2024-33482 · Zimaos · Zimaos
Name of the Vulnerable Software and Affected Versions: ZimaOS versions 1.2.4 and earlier Description: The issue allows authenticated users to perform a directory traversal attack via the API endpoint http:///v2 1/file, enabling access to sensitive system directories such as /etc. This could expos...
MAL-2024-9244 Malicious code in prismjs-editor-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 040f9d206fa46c86f67191c2a1777918670867a6e0888635b2f08567360ba10f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in prismjs-editor-v2
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
kernel: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible for finding the vCPU that matches the user-provided CPUID, which of course may not be valid. If the ID is invalid, kvmgetvcpubyid...
How to Migrate Veeam Backup for Salesforce off CentOS
Purpose This article documents how to migrate a Veeam Backup for Salesforce VBSF deployment from a machine running CentOS 7 to a machine running a supported Linux distro. Starting in Veeam Backup for Salesforce version 3, CentOS will no longer be supported as a distro for the deployment of Veeam...
