1375 matches found
Memory corruption
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...
Design/Logic Flaw
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...
CVE-2023-43533
CVE-2023-43533 concerns a transient DoS in WLAN firmware on Qualcomm chipsets when a received beacon’s length is shorter than the 802.11 beacon frame. Multiple sources document the issue with the same description, indicating the WLAN firmware is the affected component and the root cause relates t...
CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...
CVE-2023-43520
CVE-2023-43520 is a memory corruption issue in Qualcomm WLAN components, arising when an Access Point includes a TID-to-link mapping Information Element in beacons and a station parses it. The vulnerability is documented across multiple sources (NVD/NVIDIA CVE entry, Red Hat advisory) with a base...
PT-2024-13093 · Qualcomm · Snapdragon +62
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when an Access Point AP includes a TID Traffic ID to link mapping Information Element IE in its beacons...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from a denial of service issue in the WLAN firmware when the length of a received beacon is less than the length of an ieee802.11 beacon frame...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption when an AP includes a TID to link mapping IE in a beacon and the STA is parsing the beacon TID to link mapping IE...
PT-2024-13106 · Unknown · Wlan Firmware
Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in WLAN Firmware. It occurs when the length of a received beacon is less than the length of an ieee802.11 beacon frame...
Default credentials
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...
CVE-2024-23726
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...
Ubee DDW365 XCNDDW365 Security Vulnerability
Ubee DDW365 XCNDDW365 is a wireless router. A security vulnerability exists in the Ubee DDW365 XCNDDW365. An attacker can exploit this vulnerability to obtain the default WPA2-PSK value by observing beacon frames...
PT-2024-20037 · Ubee · Ubee Ddw366 +1
Name of the Vulnerable Software and Affected Versions: Ubee DDW365 XCNDDW365 devices affected versions not specified Ubee DDW366 XCNDXW3WB devices affected versions not specified Description: The issue concerns Ubee devices having predictable default WPA2 PSKs, which could lead to unauthorized...
Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe
Poorly secured Microsoft SQL MS SQL servers are being targeted in the U.S., European Union, and Latin American LATAM regions as part of an ongoing financially motivated campaign to gain initial access. "The analyzed threat campaign appears to end in one of two ways, either the selling of 'access'...
ProcessStomping - A Variation Of ProcessOverwriting To Execute Shellcode On An Executable'S Section
A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a targeted sectio...
PT-2023-12930 · Curl · Curl
Name of the Vulnerable Software and Affected Versions: curl affected versions not specified Description: The issue concerns a cyber espionage campaign, specifically the KV-botnet investigation. It involves various threats, including Kv-botnet, Beacon, Zuo rat, Hiatusrat, and Imminentmonitor rat...
PT-2024-14638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL pointer dereference in the wfx set mfp ap function has been resolved. The ieee80211 beacon get function can return NULL, and wfx set mfp ap should check the return value...
CVE-2023-33083
Memory corruption in WLAN Host while processing RRM beacon on the AP...