Windows CDP User Components Information Disclosure Vulnerability

...

Microsoft Windows CDP User Components 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows CDP User Components. An attacker could exploit this vulnerability to obtain sensitive information. The following...

CVE-2023-35326: Use of Uninitialized Resource

Windows CDP User Components Information Disclosure Vulnerability...

CVE-2023-30625

Rudder-server (RudderStack CDP) prior to version 1.3.0-rc.1 is affected by an SQL injection that can lead to remote code execution because the postgres user rutde_rudder is granted superuser privileges by default. Affected component: rudder-server in RudderStack; vulnerability is triggered via SQ...

The vulnerability of Microprogrammed Ethernet Switchboard software, related to memory release errors, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from FortiSwitch is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted LLDP/CDP/EDP packets...

Cisco IOS XR Software Discovery Protocol DoS (cisco-sa-xr-cdp-wnALzvT2)

A vulnerability Cisco IOS XR can allow an unauthenticated, network-adjacent attacker to cause a denial of service DoS condition on an affected device. If the Cisco Discovery Protocol CDP is in use, an attacker can cause a heap buffer overflow resulting in a restart of the CDP process. Please see...

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Description The pimcore/pimcore package is an open source platform that provides PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce services. stored xss vulnerability occurs when you change the value of Abbreviation, Longname, Converter Service at "Settings" = "Data Objects" = "Quantity Value" in the...

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Vuln : Stored XSS Description The pimcore/pimcore package is an open source platform that provides PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce services. stored xss vulnerability occurs when you change the value of name at "Setinngs" = "Website Settings" in the pimcore service. Proof of Concept...

CDP filters installation fails with "Storage providers offline"

Challenge When installing the CDP I/O Filter, the operation fails with "Storage providers are offline." When this occurs you may also notice that within the VMWare GUI the VMWare storage providers show as disconnected. The following is an example of what can be found in the I/O Deployment log:...

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: CDP-1020n 481 System Summary: COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides...

COMMAX Smart Home IoT Control System CDP-1020n - SQL Injection Authentication Bypass Vulnerability

Exploit Title: COMMAX Smart Home IoT Control System CDP-1020n - SQL Injection Authentication Bypass Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass Vendor: COMMAX Co., Ltd. Prodcut web page:...

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass

Summary COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life values and safety. Description The application suffers from an SQL Injection vulnerability. Input passed through the 'id' POST parameter in 'loginstart.asp' is not properly...

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

✍️ Description pimcore is a Open Source Data & Experience Management Platform PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce this package is vulnerable for Stored XSS thru gender tag 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable of stored xss 📍 Location Gender.phpL21...

CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

CVE-2021-26111

CVE-2021-26111 affects FortiSwitch memory management: versions 6.4.0–6.4.6, 6.2.0–6.2.6, 6.0.0–6.0.6, 3.6.11 and earlier are vulnerable. A missing release of memory after effective lifetime can allow an attacker on an adjacent network to exhaust available memory by sending specially crafted LLDP/...

PT-2021-7566

Name of the Vulnerable Software and Affected Versions FortiSwitch versions 3.6.11 and below FortiSwitch versions 6.0.0 through 6.0.6 FortiSwitch versions 6.2.0 through 6.2.6 FortiSwitch versions 6.4.0 through 6.4.6 Description A missing release of memory after effective lifetime issue may allow a...

CVE-2021-26111: Missing Release of Memory after Effective Lifetime

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

VeeamCDP I/O filter cannot be installed "Error: the operation is not allowed in the current state"

Challenge The installation of the Veeam CDP I/O Filter fails during deployment with the following error: Error Installing VeeamCDP components on cluster: ... Error: the operation is not allowed in the current state Error Failed to install VeeamCDP I/O filters: Failed to install VeeamCDP I/O...

Veeam CDP service does not start after the installation of the storage integration plug-in

Challenge Certain primary storage integration plug-in setup programs leave the Veeam Continuous Data Protection Veeam CDP service stopped after the installation. The following plug-ins are affected: Dell EMC SC Compellent Plug-In for Veeam Backup & Replication Tintri IntelliFlash Plug-In for Veea...

How to uninstall Veeam CDP VAIO filter driver manually

Article Applicability This article documents the manual filter driver removal process. If Veeam Backup & Replication is available, the recommended method for uninstalling the I/O Filter is documented in the user guide. Veeam Backup & Replication - Updating and Uninstalling I/O Filter Objective Th...