1032 matches found
CVE-2020-16898-Bad-Neighbor
================================================================================= Simple policy to detect CVE-2020-16898: Bad Neighbor Following functionality are provided by the script :: 1 Script checks on heuristic described here:...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
sylkie
sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...
YZMCMSxss
YZMCMSxss CVE-2018-8078 YZMCMS v3.7 latest version xss vulnerability YZMCMS V3.7 Stored XSS This xss exists in the newly added advertising management module in v3.7, as shown in the figure: This xss exists in v3.7 new advertising management module, as shown in the figure: We can find the specific...
privaxy
Privaxy Next generation tracker and advertisement blocker About Privaxy is a MITM HTTPs proxy that sits in between HTTPs talking applications, such as a web browser and HTTP servers, such as those serving websites. By establishing a two-way tunnel between both ends, Privaxy is able to block netwo...
Docker-Container-CVE-2020-13401
CVE-2020-13401 Study Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11 Containers that are created with Docker Engine versions before 19.03.11 are vulnerable to receive and apply fake RA Router Advertisement messages from other containers in the network. Receiving...
CVE-2020-16898
CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...
CVE-2020-10749
CVE-2020-10749 CVE-2020-10749 PoC Kubernetes MitM attacks via IPv6 rogue router advertisements For educational purposes only Requirements Kubernetes cluster with the following kubelet version kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6...
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...
CVE-2026-116253 DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...
CVE-2026-116253
The software DedeCMS 5.7.118 is vulnerable to a code injection vulnerability within the Advertisement Rendering component. Specifically, the issue resides in the plus/ad_js.php file and involves the common.inc.php::_RunMagicQuotes function. An attacker can exploit this remotely by manipulating th...
EUVD-2026-109685
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...
CVE-2026-116253 DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...
PT-2026-123243
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php:: RunMagicQuotes of the file plus/ad js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed...
DEBIAN-CVE-2026-115486
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet...
CVE-2026-115486
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet...
EUVD-2026-108557
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet...
CVE-2026-115486
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet...
PT-2026-121691
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet...
UBUNTU-CVE-2023-7356
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...