CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE Prueba de Concepto 10 abr 2017 ¿Aún tienes telnet habilitado en tus switches Catalyst? Piénsalo dos veces, aquí tienes un exploit de prueba de concepto de ejecución remota de código para el switch Catalyst 2960 con el firmware sugerido más reciente. Echa un vistaz...

security-interview-questions

Sources QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

hive

De WikiLeaks: Hoy, 9 de noviembre de 2017, WikiLeaks publica el código fuente y los registros de desarrollo de Hive, un componente principal de la infraestructura de la CIA para controlar su malware. Hive resuelve un problema crítico para los operadores de malware de la CIA. Incluso el implante d...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

CVE-2026-3869

CVE-2026-3869 is a Critical (CVSS 4.0: 9.2) vulnerability in the Schneider Electric Modicon M580 programmable logic controller (PLC). The flaw is a CWE-303 (Incorrect Implementation of Authentication Algorithm) that can lead to loss of confidentiality, integrity, and availability of the PLC when ...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations beyond the buffer boundaries in...

The vulnerability of the ebtables_init() function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ebtablesinit function in the net/bridge/netfilter/ebtables.c module, which is part of Linux’s kernel-based networking functions, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nvme_free_host_mem_multi() function in the driver/nvme/host/pci.c module of the Linux kernel’s NVME driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmefreehostmemmulti function in the nvme/host/pci.c driver module of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the tlbFlush() function in the arch/arm64/include/asm/tlb.h header of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlbFlush function in the arch/arm64/include/asm/tlb.h header of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the ucsi_handle_connector_change() function in the drivers/usb/typec/ucsi/ucsi.c module of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsihandleconnectorchange function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the vmci_transport_recv_listen() function in the net/vmw_vsock/vmci_transport.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vmcitransportrecvlisten function in the net/vmwvsock/vmcitransport.c module, which is part of the networking functions of the Linux kernel, is related to resource management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the vfiopci_core_close_device() function in the drivers/vfio/pci/vfiopci_core.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the vti6_tnl_lookup() function in the net/ipv6/ip6_vti.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6tnllookup function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability may allow an attacker, acting remotely, to...

The vulnerability of the crush_decode() function in the net/ceph/osdmap.c kernel of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the sctp_unpack_cookie() function in the net/sctp/sm_make_chunk.c module of the Linux operating system’s SCTP kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpunpackcookie function in the net/sctp/smmakechunk.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter mismatches. Exploiting this vulnerability allows a remote attacker to compromise the...

The vulnerability of the `scpsys_get_bus_protection_legacy()` function in the drivers/pmdomain/mediatek/mtk-pm-domains.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scpsysgetbusprotectionlegacy function in the drivers/pmdomain/mediatek/mtk-pm-domains.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the check_scalar_ids() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkscalarids function in the kernel/bpf/verifier.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the `ivpu_ipc_receive()` function in the drivers/accel/ivpu/ivpu_ipc.c kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ivpuipcreceive function in the drivers/accel/ivpu/ivpuipc.c module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker...