PT-2023-21823 · Qualcomm · Snapdragon +72

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves memory corruption in core services. This occurs when the Diag handler receives a command to configure event listeners. Recommendations: At the moment, there is no...

The vulnerability of the ping diagnostic function of the microprogrammed routing software Connectize G6 AC2100 allows a hacker to execute arbitrary commands.

The vulnerability of the ping diagnostic function of the microprogramming software for the Connectize G6 AC2100 router is due to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the diag_ping_start function (validate.so) in the microprogrammed industrial Wi-Fi routers Yifan YF325 allows a hacker to execute arbitrary commands.

The vulnerability of the diagpingstart function in the validate.so library of Yifan YF325 industrial Wi-Fi routers relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-6355 · Connectize · Connectize Ac21000 G6

Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: An issue in the Connectize AC21000 G6 allows attackers to run arbitrary commands via a crafted string in the ping utility. The vulnerability is caused by weaknesses in the authorizatio...

CVE-2023-43959

An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component...

CVE-2023-43959

An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component...

CVE-2023-43959

An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component...

YeaLink SIP-T19P-E2 OS Command Injection Vulnerability

YeaLink SIP-T19P-E2 is a VOIP phone from China YeaLink. A security vulnerability exists in YeaLink SIP-T19P-E2 version v.53.84.0.15, which originates from a vulnerability that allows a privileged attacker to execute arbitrary code via a specially crafted request via the ping feature of the...

CVE-2023-43959

An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component...

CVE-2023-41263

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

VulnCheck KEV: CVE-2021-36380

Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi...

CVE-2023-43890

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request...

CVE-2023-43890

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request...

Command injection

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request...

NETIS SYSTEMS N3 Operating System Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. An operating system command injection vulnerability exists in the Netis N3Mv2-V.1.0.1.865 version, which stems from a command injection vulnerability in the diagnostic tools page...

CVE-2023-43890

CVE-2023-43890 affects Netis N3Mv2-V1.0.1.865. The vulnerability is a command injection in the device’s diagnostic tools page that can be exploited via a crafted HTTP request. According to the provided documents, exploitability is network-based with low privileges required and no user interaction...

[SECURITY] Fedora 39 Update: traceroute-2.1.3-1.fc39

The traceroute utility displays the route used by IP packets on their way to a specified network or Internet host. Traceroute displays the IP number and host name if possible of the machines along the route taken by the packets. Traceroute is used as a network debugging tool. If you're having...

Frauscher Sensortechnik FDS101 v1.4.24 Code Injection Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. A code injection vulnerability exists in Frauscher Sensortechnik FDS101 v1.4.24, which stems from the presence of a remote code execution RCE vulnerability...

Frauscher Sensortechnik FDS101 Path Traversal Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. A path traversal vulnerability exists in Frauscher Sensortechnik FDS101 v1.4.24, which stems from the presence of a path traversal vulnerability...

Frauscher Sensortechnik FDS101 SQL Injection Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. Frauscher Sensortechnik FDS101 version v1.4.24 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...