174 matches found
CVE-2024-8190
CVE-2024-8190: Ivanti Cloud Service Appliance - Аутентифицированная инъекция команд Доказательство концепции для эксплуатации CVE-2024-8190 на уязвимых устройствах. Сообщение в блоге Коренная причина и индикаторы компрометации здесь:...
CVE-2024-8963
CVE-2024-8963 Ivanti Cloud Services Appliance - обход пути Обход пути Path Traversal в Ivanti CSA до версии 4.6 Patch 519 позволяет удалённому неаутентифицированному злоумышленнику получить доступ к ограниченной функциональности...
CVE-2024-8190-unauth
CVE-2024-8190 без аутентификации Описание Объединение CVE-2024-8963 и CVE-2024-8190 — PoC для неаутентифицированного RCE на Ivanti CSA версии 4.6 и ниже. CVE-2024-8963 Обход пути в Ivanti CSA до версии 4.6 Patch 519 позволяет удаленному неаутентифицированному атакующему получить доступ к...
Linux Distros Unpatched Vulnerability : CVE-2026-90344
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignor...
EUVD-2026-82005
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that invalid channel. Th...
CVE-2026-90344 wifi: mac80211: disconnect on CSA to channel 0
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that invalid channel. Th...
CVE-2026-90344
CVE-2026-90344 affects the Linux kernel 's mac80211 WiFi subsystem. A refactor of the Channel Switch Announcement (CSA) parsing logic erroneously treats channel zero as equivalent to "no information present," causing the driver to ignore a CSA from an access point that advertises a switch to that...
CVE-2021-44529
CVE-2021-44529 Уязвимость внедрения кода в CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA позволяет неаутентифицированному пользователю выполнять произвольный код с ограниченными привилегиями nobody...
CVE-2021-44529
CVE-2021-44529 Домашняя страница вендора: https://www.ivanti.com/ Ссылка на ПО: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Версия: CSA 4.6 4.5 - EOF Aug 2021 Выполните root@kitploit: python3 exploit.py Пример root@kitploit: python3 exploit.py 'https://x.x.x.x'...
kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address
A beacon protection bypass vulnerability was found in the Linux kernel's mac80211 WiFi stack. According to IEEE 802.11-2020, beacon frames must be sent to the broadcast address, but mac80211 incorrectly accepts unicast beacon frames with the Protected Frame bit set to 1. This allows attackers to...
CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
EUVD-2026-48869
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...
SUSE CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
DEBIAN-CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
UBUNTU-CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23396 wifi: mac80211: fix NULL deref in mesh_matches_local()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...
CVE-2026-23396
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...