EUVD-2020-20050

Malware in sbrugna...

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

CVE-2023-28352: Incorrect Authorization

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

NetBSD buffer error vulnerability

NetBSD is an open source Unix-like operating system from the NetBSD Foundation. A buffer error vulnerability exists in NetBSD versions 8.2-9.2, which originates from a boundary error in the processing of a response to a broadcast discovery packet by a PPPoE client. A remote attacker controlling...

PT-2021-11403

Name of the Vulnerable Software and Affected Versions: Rostelecom CS-C2SHW version 5.0.082.1 Description: The issue is related to a Denial of Service vulnerability. It occurs due to a bug in the AgentGreen service when parsing broadcast discovery UDP packets. If a packet of too small size is sent...

CVE-2020-27541: Out-of-bounds Write

Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and start...

XXE vulnerability via UDP broadcast response in swarm client

swarm allows clients to auto-discover Jenkins instances on the same network through a UDP discovery request. Responses to this request are XML documents. swarm does not configure the XML parser in a way that would prevent XML External Entity XXE processing. This allows unauthenticated attackers o...