EUVD-2022-33608

Malicious code in bioql PyPI...

EUVD-2024-48005

Malicious code in bioql PyPI...

EUVD-2024-48015

Malicious code in bioql PyPI...

CVE-2024-6352

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

CVE-2024-6351

CVE-2024-6351 concerns a buffer overflow in the Ember ZNet NWK/APS layer caused by a malformed packet, potentially leading to a denial of service via an assertion. Affected component: Ember ZNet stack’s NWK/APS processing. Root cause: malformed incoming packet; no exploitation details are provide...

CVE-2024-6352

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

CVE-2024-6352 Malformed packet leads to denial of service in APS layer

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

CVE-2024-37380

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point Version 6.6.65 and earlier Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later...

CVE-2024-37380

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point Version 6.6.65 and earlier Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later...

CVE-2024-37380

CVE-2024-37380 affects UniFi U6+ Access Point (versions ≤ 6.6.65). The root cause is a misconfiguration that could cause VLAN traffic to be forwarded incorrectly among APs meshed to the U6+. Impact described as VLAN traffic forwarding issues; exploit details are not provided in the documents. Rec...

CVE-2023-50381

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2024-20336

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform buffer overflow attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

Command injection

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

Buffer overflow

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform buffer overflow attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335

CVE-2024-20335 affects Cisco Small Business 100/300/500 Series Wireless APs. The issue is in the web-based management interface where insufficient validation of input enables an authenticated, remote attacker with valid admin credentials to perform command injection and potentially execute arbitr...

WPAxFuzz - A Full-Featured Open-Source Wi-Fi Fuzzer

This tool is capable of fuzzing either any management, control or data frame of the 802.11 protocol or the SAE exchange. For the management, control or data frames, you can choose either the "standard" mode where all of the frames transmitted have valid size values or the "random" mode where the...

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Ruckus Wireless Access Point AP software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery CSRF or remote code execution RCE. This vulnerability impacts Ruckus ZoneDirector,...

aps.uk.com Cross Site Scripting vulnerability OBB-3279309

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...