canTot

This is a Python-based CLI framework called "canTot" that is designed for CAN Bus hacking and exploitation. It is similar to an exploit framework but focused on known CAN Bus vulnerabilities or "fun CAN Bus hacks." The framework is made up of several modules, each with its own specific...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...

Qualcomm Chipsets Input Validation Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper validation of an array index in the WLAN HAL, which can lead to memory corruption...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...

SUSE CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

Malicious code in react-navigation-area-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc67ff72904c84b476e3f102ad2d7c61225b500ed7e1dc8852166e2c1b88c694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7977 Malicious code in react-navigation-area-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc67ff72904c84b476e3f102ad2d7c61225b500ed7e1dc8852166e2c1b88c694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions prior to v2.3.0 and v2.2.2a, which stems from the fact that Brocade SANnav stores SNMPv3 authentication passwords in cleartext, and a privileged user can...

The vulnerability of the AREA element in the Joplin note-taking application allows a attacker to perform XSS attacks.

The vulnerability of the AREA element in the Joplin note-taking application is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2023-4611

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak...

Malicious code in mapsapi-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a12b68cea467324465b98ad4c7ffcddb67cac55eec195215bce156b916abbda The OpenSSF Package Analysis project identified 'mapsapi-area' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1533 Malicious code in mapsapi-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a12b68cea467324465b98ad4c7ffcddb67cac55eec195215bce156b916abbda The OpenSSF Package Analysis project identified 'mapsapi-area' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

The vulnerability of the Windows Wireless Wide Area Network Service (WwanSvc) allows a hacker to compromise the protected information.

The vulnerability of the Windows Wireless Wide Area Network Service WwanSvc operating system is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2023-36905

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

Information disclosure

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...

kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

...

PT-2023-4380 · Microsoft · Windows Wireless Wide Area Network Service +1

Name of the Vulnerable Software and Affected Versions: Windows Wireless Wide Area Network Service WwanSvc affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Wireless Wide Area Network Service WwanSvc, which can allow an attack...

Microsoft Windows Wireless Networking Security Vulnerability

Microsoft Windows Wireless Networking is an application from Microsoft Corporation USA.WIFI network connectivity application. A security vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An attacker exploiting this vulnerability could gain access to sensitive...