Design/Logic Flaw

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

CVE-2020-3429

CVE-2020-3429 affects Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. A vulnerability in WPA2/WPA3 security implementation allows an unauthenticated adjacent attacker to trigger a DoS by sending a crafted authentication packet during the WPA2/WPA3 handshake when 802....

iOS / macOS Wifi Proximity Vulnerability

iOS and macOS suffered from a wifi proximity kernel double-free vulnerability in AWDL BSS Steering. if 0 iOS/MacOS wifi proximity kernel double free in AWDL BSS Steering As part of developing an exploit for CVE-2020-3843 a heap overflow in AWDL I've been looking at the code for "BSS Steering". It...

kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c

A flaw was found in the Linux kernel's Marvell wifi chip driver. A heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of servicesystem crash or execute arbitrary code...

Exploit for Out-of-bounds Write in Sudo_Project Sudo

PoC exploit for CVE-2019-18634, a vulnerability in the Sudo pack...

CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3448

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3447

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

Remote code execution

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

Authentication flaw

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

Denial of service

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

CVE-2014-3449

CVE-2014-3449 affects BSS Continuity CMS 4.2.22640.0, exposing an Authentication Bypass due to insufficient ACLs that allowed unauthenticated access to the admin interface. The vulnerability was demonstrated by exposing the administrative path /wcm/system/pages/newui/admin.aspx, enabling bypass w...

CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3448

The CVE-2014-3448 issue affects BSS Continuity CMS 4.2.22640.0. Affected component is the ASPX file upload handler, which allows unauthenticated uploads without verifying file type or origin. The root cause is inadequate validation in the upload functionality, enabling remote code execution by pl...

CVE-2014-3448

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3447

CVE-2014-3447 affects BSS Continuity CMS 4.2.22640.0 . The vulnerability allows a remote, unauthenticated attacker to overload the underlying database by repeatedly calling a node enumeration script, leading to a Denial of Service within minutes. The issue arises from heavy processing within the ...

CVE-2014-3447

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

CVE-2014-10398

The CVE-2014-10398 entry describes multiple XSS vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client’s bsi.dll (Private Client/ Retail Client, versions 2.5, 2.4 and earlier). The issue allows remote attackers to inject arbitrary script/HTML via parameters DICTIONARY, FILTERIDENT, FROMSCHEME, ...