PT-2021-20398

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640-US version 1.01B04 Description: The issue is related to Buffer Overflow, with multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .b...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WPA Denial of Service (cisco-sa-wpa-dos-cXshjerc)

According to its self-reported version, IOS-XE is affected by a Denial of Service vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family and could allow an unauthenticated, adjacent attacker to cause denial of...

Design/Logic Flaw

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

CVE-2020-3429

CVE-2020-3429 affects Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. A vulnerability in WPA2/WPA3 security implementation allows an unauthenticated adjacent attacker to trigger a DoS by sending a crafted authentication packet during the WPA2/WPA3 handshake when 802....

CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

iOS / macOS Wifi Proximity Vulnerability

iOS and macOS suffered from a wifi proximity kernel double-free vulnerability in AWDL BSS Steering. if 0 iOS/MacOS wifi proximity kernel double free in AWDL BSS Steering As part of developing an exploit for CVE-2020-3843 a heap overflow in AWDL I've been looking at the code for "BSS Steering". It...

kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c

A flaw was found in the Linux kernel's Marvell wifi chip driver. A heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of servicesystem crash or execute arbitrary code...

Exploit for Out-of-bounds Write in Sudo_Project Sudo

PoC exploit for CVE-2019-18634, a vulnerability in the Sudo pack...

CVE-2014-3448

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3447

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

Denial of service

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

Authentication flaw

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

Remote code execution

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3449

CVE-2014-3449 affects BSS Continuity CMS 4.2.22640.0, exposing an Authentication Bypass due to insufficient ACLs that allowed unauthenticated access to the admin interface. The vulnerability was demonstrated by exposing the administrative path /wcm/system/pages/newui/admin.aspx, enabling bypass w...

CVE-2014-3448

The CVE-2014-3448 issue affects BSS Continuity CMS 4.2.22640.0. Affected component is the ASPX file upload handler, which allows unauthenticated uploads without verifying file type or origin. The root cause is inadequate validation in the upload functionality, enabling remote code execution by pl...

CVE-2014-3448

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3447

CVE-2014-3447 affects BSS Continuity CMS 4.2.22640.0 . The vulnerability allows a remote, unauthenticated attacker to overload the underlying database by repeatedly calling a node enumeration script, leading to a Denial of Service within minutes. The issue arises from heavy processing within the ...