7004 matches found
Design/Logic Flaw
Vulnerability discovered is related to the peer-to-peer p2p communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes...
CVE-2023-30769 Rab13s Exploit
Vulnerability discovered is related to the peer-to-peer p2p communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes...
CVE-2023-30769
CVE-2023-30769 describes a vulnerability in peer-to-peer (p2p) communications where an attacker can craft consensus messages and target individual nodes, potentially taking them offline. Multiple connected sources reiterate that an attacker can crawl network peers via getaddr messages to attack u...
Mitsubishi Electric GC-ENET-COM 竞争条件问题漏洞
The Mitsubishi Electric GC-ENET-COM is a graphical operations controller from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric GC-ENET-COM that stems from the presence of a competitive condition vulnerability that could allow a remote, unauthenticated attacker...
The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS, allowing a intruder to escalate their privileges.
The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Mercury MAC 1200R 路径遍历漏洞
The Mercury MAC 1200R is a wireless router from Mercury Communications Technology Mercury of Shenzhen, China. A security vulnerability exists in the Mercury MAC 1200R that stems from a directory traversal vulnerability...
TCP & ICMP session are not resumed after Auto reconnect
TCP & ICMP session are not resumed after Auto reconnect TCP Expectation by Customer When the Citrix Gateway client is disconnected and reconnect itself automatically, we expected the TCP communications to be resumed through the retransmission capacity of TCP...
Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign
Emergent threats evolve quickly. We will update this blog with new information as it comes to light and we are able to verify it. Erick Galinkin, Ted Samuels, Zach Dayton, Eoin Miller, Caitlin Condon, Stephen Fewer, Spencer McIntyre, and Christiaan Beek all contributed to this blog. On Wednesday,...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the communication module, Tricon Communications Module, relates to the issue of receiving distorted TriStation packets. This vulnerability allows a perpetrator to trigger a service failure.
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module is related to the execution of distorted TriStation packets. Exploiting this vulnerability can allow an intruder to cause service failures...
CVE-2022-36429
A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-crafted JSON object can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...
Netgear Orbi Satellite RBS750 ubus backend communications command execution vulnerability
Talos Vulnerability Report TALOS-2022-1597 Netgear Orbi Satellite RBS750 ubus backend communications command execution vulnerability March 21, 2023 CVE Number CVE-2022-36429 SUMMARY A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite...
[SECURITY] Fedora 36 Update: guile-gnutls-3.7.11-1.fc36
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
Dell PowerEdge Server BIOS 缓冲区错误漏洞
Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. The Dell PowerEdge Server BIOS has a buffer error vulnerability that stems from an incorrect SMM communications buffer validation vulnerability...
[SECURITY] Fedora 38 Update: guile-gnutls-3.7.11-1.fc38
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
Intel® oneAPI Toolkits Advisory
Summary: Potential security vulnerabilities in some Intel® oneAPI Toolkits may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-25987 Description: Improper handling of Unicode encoding in source...
[SECURITY] Fedora 37 Update: guile-gnutls-3.7.11-1.fc37
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
[SECURITY] Fedora 37 Update: gnutls-3.8.0-1.fc37
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...