207 matches found
MAL-2025-6172 Malicious code in kiwi-module-cdp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34281bc0357b483d9a5d7b84475fd6e4c2db6e993a61ff41636ee26e388368d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kiwi-module-cdp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34281bc0357b483d9a5d7b84475fd6e4c2db6e993a61ff41636ee26e388368d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-20213
A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of the CDP process on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes CDP traffic...
CVE-2025-20202
CVE-2025-20202 affects Cisco IOS XE Wireless Controller Software. The root cause is insufficient input validation of AP Cisco Discovery Protocol (CDP) neighbor reports processed by the wireless controller. An unauthenticated, adjacent attacker can send a crafted CDP packet to an AP, which could c...
MAL-2024-11948 Malicious code in cdp-agentkit-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8d524f8c7995e353b380cc2c659b12067d589d4b56003ac355d9cc0736f8cd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11949 Malicious code in cdp-wallet-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cdp-wallet-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cdp-agentkit-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca0429e104094162231b21ae70c94d199a4c5c2d25813c0eb807d94d7079973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11204 Malicious code in cdp-agentkit-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca0429e104094162231b21ae70c94d199a4c5c2d25813c0eb807d94d7079973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cdp-agentkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07ec87bf0a5899c4f97a1c0fcd453df1c220cea6a7a6944d6316f40f9def44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11187 Malicious code in cdp-agentkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07ec87bf0a5899c4f97a1c0fcd453df1c220cea6a7a6944d6316f40f9def44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cdp-agentkit-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11186 Malicious code in cdp-agentkit-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROS-20240611-11
A vulnerability in the CDP PDU Packet Handler component of the LLDP protocol implementation under Unix Lldpd is related to an uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential information. remotely to gain...
Above - Invisible Network Protocol Sniffer
Invisible protocol sniffer for finding vulnerabilities in the network. Designed for pentesters and security engineers. Above: Invisible network protocol sniffer Designed for pentesters and security engineers Author: Magama Bazarov, Pseudonym: Caster Version: 2.6 Codename: Introvert Disclaimer All...
CVE-2024-3788
Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes SSI, through License /admin/CDPUsers. Exploitation of this vulnerability could allow a remote user to execute arbitrary code...
cdp-andorre.centredoc.fr Cross Site Scripting vulnerability OBB-3921956
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cdp-online.nl Improper Access Control vulnerability OBB-3863178
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WhatsUp Gold 2022 22.1.0 Build 39 Cross Site Scripting
Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting XSS Date: April 18, 2023 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.22.1.0 Build 39 Tested on: Windows 2022 Server CVE : CVE-2023-35759 Reference:...
WhatsUp Gold 2022 (22.1.0 Build 39) - XSS
Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting XSS Date: April 18, 2023 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.22.1.0 Build 39 Tested on: Windows 2022 Server CVE : CVE-2023-35759 Reference:...