CVE-2024-8190

CVE-2024-8190: حقن أوامر بعد المصادقة في Ivanti Cloud Service Appliance إثبات مفهوم لاستغلال CVE-2024-8190 على الأجهزة القابلة للاستغلال. منشور المدونة السبب الجذري ومؤشرات الاختراق هنا: https://www.horizon3.ai/attack-research/cisa-kev-cve-2024-8190-ivanti-csa-command-injection/ الاستخدام...

CVE-2024-8190-unauth

CVE-2024-8190 non autenticato Descrizione Combinazione di CVE-2024-8963 e CVE-2024-8190 - PoC per RCE non autenticata su Ivanti CSA 4.6 e versioni precedenti. CVE-2024-8963 Il Path Traversal in Ivanti CSA precedente alla 4.6 Patch 519 consente a un attaccante remoto non autenticato di accedere a...

CVE-2024-8963

CVE-2024-8963 Ivanti Cloud Services Appliance - Path Traversal Path Traversal in der Ivanti CSA vor 4.6 Patch 519 ermöglicht es einem entfernten, nicht authentifizierten Angreifer, auf eingeschränkte Funktionen zuzugreifen...

CVE-2021-44529

CVE-2021-44529 Homepage del fornitore: https://www.ivanti.com/ Link del software: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Versione: CSA 4.6 4.5 - EOL ago 2021 Esegui root@kitploit: python3 exploit.py Esempio root@kitploit: python3 exploit.py 'https://x.x.x....

CVE-2021-44529

CVE-2021-44529 La vulnerabilità di iniezione di codice in CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA consente a utenti non autenticati di eseguire codice arbitrario con privilegi limitati nobody...

CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

EUVD-2026-48869

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

SUSE CVE-2026-23396

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

DEBIAN-CVE-2026-23396

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

CVE-2026-23396

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

UBUNTU-CVE-2026-23396

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

CVE-2026-23396 wifi: mac80211: fix NULL deref in mesh_matches_local()

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

CVE-2026-23396

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

CVE-2026-23279 wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in meshrxcsaframe In meshrxcsaframe, elems-meshchanswparamsie is dereferenced at lines 1638 and 1642 without a prior NULL check: ifmsh-chswttl = elems-meshchanswparamsie-meshttl;...

CVE-2026-23279

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in meshrxcsaframe In meshrxcsaframe, elems-meshchanswparamsie is dereferenced at lines 1638 and 1642 without a prior NULL check: ifmsh-chswttl = elems-meshchanswparamsie-meshttl;...

The vulnerability of the function ieee80211_ibss_finish_ca() in the net/mac80211/ibss.c module of the mac80211 stack implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211ibssfinishcsa in the net/mac80211/ibss.c module of the Linux kernel’s mac80211 stack is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-28329

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mac80211 component, specifically in the mesh matches local function. This function unconditionally dereferences ie-mesh config to compare mesh...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993005 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connecte...