SUSE CVE-2023-39975

kdc/dotgsreq.c in MIT Kerberos 5 aka krb5 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another...

PT-2023-6955

Name of the Vulnerable Software and Affected Versions CrushFTP versions prior to 10.5.1 Description The issue is related to errors in handling input data in the Object Attribute Handler component of the CrushFTP cross-platform FTP server. Exploitation of this issue may allow a remote attacker to...

krb5: double-free in KDC TGS processing

A vulnerability was found in MIT krb5, where an authenticated attacker can cause a KDC to free the same pointer twice if it can induce a failure in authorization data handling...

RHEL 9 : krb5 (RHSA-2023:6699)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6699 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

The vulnerability of the DevTools set of tools for web development in the Mozilla Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary commands.

The vulnerability of the DevTools suite for web development in the Mozilla Firefox browser and Thunderbird email client is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

USN-6450-1 openssl vulnerabilities

Tony Battersby discovered that OpenSSL incorrectly handled key and initialization vector IV lengths. This could lead to truncation issues and result in loss of confidentiality for some symmetric cipher modes. CVE-2023-5363 Juerg Wullschleger discovered that OpenSSL incorrectly handled the AES-SIV...

Insecure Data Handling

libnbd is vulnerable to Insecure Data Handling. The vulnerability is due to nbdunlockedgetsize function not sanitizing/checking data that sizes larger than INT64MAX. This could lead to potential Denial of service...

The vulnerability of the software for creating wireless routers based on Debian RaspAP, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary commands.

The vulnerability of the software for creating wireless routers based on Debian RaspAP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted POST request with t...

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Yifan YF325 缓冲区错误漏洞

Yifan YF325 is a wireless router from Yifan. The Yifan YF325 suffers from a buffer overflow vulnerability that stems from a boundary error in the gwcfgcgisetmanagepostdata function malloc function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer overflow...

PT-2023-6107 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: The issue is related to a buffer overflow in the D-Link DAP-1325 wireless signal amplifier's firmware, allowing remote attackers to execute arbitrary code. This is due to the lack o...

The vulnerabilities of the classes DirCacheCheckout, ResolveMerger, PullCommand, and PatchApplier in the Git version control system for the Java Eclipse JGit framework allow a hacker to execute arbitrary code.

The vulnerability of the DirCacheCheckout, ResolveMerger, PullCommand, and PatchApplier classes in the Git version control system for the Java Eclipse JGit framework is related to improper handling of data that is sensitive to registry operations during repository cloning to the file system...

Guardians of IoT: Safeguarding connectivity of input and output channels

Ensuring the security of the Internet of Things IoT demands a meticulous examination of industry-specific vulnerabilities and a profound comprehension of data handling. Have you taken the necessary steps to confirm that your chosen third-party security vendor possesses a comprehensive understandi...

D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

Navigating privacy in a data-driven world with Microsoft Priva

Data protection and privacy have become business imperatives. In a global survey conducted by Microsoft and leaders in the academic privacy space, 90 percent of respondents said they would not buy from an organization that does not properly protect its data.1 More than ever, people have a high...

Navigating privacy in a data-driven world with Microsoft Priva

Data protection and privacy have become business imperatives. In a global survey conducted by Microsoft and leaders in the academic privacy space, 90 percent of respondents said they would not buy from an organization that does not properly protect its data.1 More than ever, people have a high...

PT-2023-36731

Уязвимость функции fq pie change модуля net/sched/sch fq pie.c подсистемы управления трафиком net/sched ядра операционной системы Linux связана с ошибками обработки данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-36730

Уязвимость функции nfs file direct read модуля fs/nfs/direct.c поддержки клиентов NFS ядра операционной системы Linux связана с ошибками обработки данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Double Free

libkrb5.so is vulnerable to Double Free. The vulnerability exists due to a failure in authorization data handling in the dotgsreq.c, which allows an attacker to cause the Key Distribution Center KDC to free the same pointer twice when incorrect data is copied from one ticket to another...