csafarms.org Cross Site Scripting vulnerability OBB-3721921

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

csa-india.org Cross Site Scripting vulnerability OBB-3711018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

CVE-2023-33020

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

Code injection

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

CVE-2023-33020

CVE-2023-33020 corresponds to a transient denial-of-service in WLAN Hosts when an invalid channel (e.g., channel out of range) is received in STA during a Channel Switch Announcement (CSA) Information Element. The CVE is rated CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack...

CVE-2023-33020 Improper Authorization in WLAN Host

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

CVE-2023-33019

CVE-2023-33019 describes a Transient Denial of Service in the WLAN Host when a mobile station processes a Channel Switch Announcement (CSA) with an invalid channel. Public sources associate this CVE with Qualcomm WLAN components (high severity, CVSSv3.1: 7.5; network attack vector, no user intera...

CVE-2023-28584

CVE-2023-28584 describes a transient DoS in Qualcomm WLAN Host when a mobile station receives an invalid channel in the Channel Switch Announcement (CSA) Information Element during a CSA. Affected component: Qualcomm WLAN/closed‑source WLAN stack in Qualcomm chipsets mentioned in multiple records...

CVE-2023-33020: Improper Authorization

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

CVE-2023-28584: Improper Authorization

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

csacentre.org.uk Cross Site Scripting vulnerability OBB-3278364

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CSA 上的 HSTS 安全漏洞

Created Date Mar 7, 2023 1:38:55 AM...

JSA10325 - CERT-CSA Option Vulnerability, Released 3/10/03

Last Modified Date Aug 24, 2026 12:35:39 AM...

Ivanti Cloud Services Appliance (CSA) Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ivanti Cloud Services Appliance CSA Command Injection', 'Description' = %q This module exploits a command injection vulnerability in the Ivanti...

CVE-2022-33285 Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames...

Cloud Security and Compliance Best Practices: Highlights From The CSA Cloud Controls Matrix

In a recent blog post, we highlighted the release of an InsightCloudSec compliance pack, that helps organizations establish and adhere to AWS Foundational Security Best Practices. While that’s a great pack for those who have standardized on AWS and are looking for a trusted set of controls to...

Cloud Audit: Compliance + Automation

Setting your own standard Today’s regulatory environment is incredibly fractured and extensive. Depending on the industry—and the part of the world your business and/or security organization resides in—you may be subject to several regulatory compliance standards. Adding to the complexity, there ...

GSD-2022-1005709 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

PT-2022-33967 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.142 Description: The issue is related to the wifi mac80211 component in IBSS mode. When the state is disconnected, the CSA should not be finalized. The actual impact and attack plausibility have not yet be...