10036 matches found
CVE-2024-51514
CVE-2024-51514 affects Huawei HarmonyOS VPN module, where a pop-up window attributed to no app can be exploited locally to affect service confidentiality. Documented impact indicates confidentiality risk; no explicit root-cause or patch details are provided across connected sources. Exploitation ...
CVE-2024-51514
Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51513
Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...
CVE-2024-51513
CVE-2024-51513 concerns Huawei HarmonyOS’ VPN module, where processes are not fully terminated. The vulnerability can affect power consumption (impact stated). The most concrete details in the connected sources indicate a local attack vector with low attack complexity, and the Red Hat and CNVD en...
CVE-2024-51513
Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...
CVE-2024-51514: Improper Input Validation
Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51513: Uncontrolled Resource Consumption
Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a pop-up window in the vpn module indicating no application attribution. An attacker...
Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft
Microsoft has revealed that a Chinese threat actor it tracks as Storm-0940 is leveraging a botnet called Quad7 to orchestrate highly evasive password spray attacks. The tech giant has given the botnet the name CovertNetwork-1658, stating the password spray operations are used to steal credentials...
[SECURITY] Fedora 40 Update: NetworkManager-libreswan-1.2.24-1.fc40
This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...
[SECURITY] Fedora 39 Update: NetworkManager-libreswan-1.2.24-1.fc39
This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...
Cisco Adaptive Security Appliance Remote Access VPN Brute Force DoS (cisco-sa-asaftd-bf-dos-vDZhLqrW)
According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an...
Cisco Firepower Threat Defense Software Remote Access VPN Brute Force DoS (cisco-sa-asaftd-bf-dos-vDZhLqrW)
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability. - A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated...
Exploit for CVE-2024-53588
iTop-privesc MY FIRST 0-DAY!!! - CVE-2024-53588 A privileg...
Top VPN Features to Consider When Choosing the Right Streaming Service
Find the best VPN for streaming with essential features like high-speed servers, strong encryption, streaming optimization, and broad…...
ROS-20241029-01
A vulnerability in the libreswan client plug-in of the NetworkManager network connection management program is related to insufficient checking of key values inside the VPN configuration file. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...
Fortinet Fortigate ['CSRF'] (FG-IR-20-158)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-158 advisory. - An insufficient verification of data authenticity vulnerability CWE-345 in the user interface of FortiProxy verison 2.0.3 a...
Fortinet Fortigate Access to NULL pointer in SSL VPN portal (FG-IR-22-086)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-086 advisory. - A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 throug...
Fortinet Fortigate MFA bypass by changing username case (FG-IR-19-283)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-19-283 advisory. - An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user...