13464 matches found
[SECURITY] [DLA 3837-1] libndp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3837-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 19, 2024 https://wiki.debian.org/LTS -...
DEBIAN-CVE-2024-38558
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVSPACKETCMDEXECUTE has 3 main attributes: - OVSPACKETATTRKEY - Packet metadata in a netlink format. - OVSPACKETATTRPACKET - Binary packet content. -...
CVE-2024-38558 net: openvswitch: fix overwriting ct original tuple for ICMPv6
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVSPACKETCMDEXECUTE has 3 main attributes: - OVSPACKETATTRKEY - Packet metadata in a netlink format. - OVSPACKETATTRPACKET - Binary packet content. -...
The vulnerability of the PT Network Attack Discovery (PT NAD) traffic analysis system arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands on behalf of the superuser.
The vulnerability of the PT Network Attack Discovery PT NAD traffic analysis system exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on behalf of the superuser...
WordPress Interface theme <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Interface versions = 3.1.0...
[SECURITY] [DSA 5713-1] libndp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5713-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 16, 2024 https://www.debian.org/security/faq -...
OESA-2024-1723 libndp security update
This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages. Security Fixes: A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in...
Exploit for Path Traversal in Solarwinds Serv-U
Exploit For CVE-2024-28995 On June 5, 2024, SolarWinds publi...
CVE-2024-37280
The CVE-2024-37280 entry concerns Elasticsearch where a stack overflow can occur during document ingestion if an index template contains a dynamic field mapping of type “passthrough” (an experimental feature), potentially leading to a Denial of Service. The core details present in connected recor...
WordPress Elespare plugin <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Horizontal Nav Menu Widget vulnerability discovered by stealthcopter in WordPress Plugin Elespare versions = 3.1.2...
Telerik Report Server Authentication Bypass / Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'Telerik Report Server Auth Bypass and Deserialization RCE', 'Description' = %q This module chains an authentication bypass...
The vulnerability of the CDP PDU Packet Handler component in the LLDP protocol implementation under Unix’s Lldpd allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the CDP PDU Packet Handler component in the LLDP protocol implementation in Unix-based systems like Lldpd is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibili...
USN-6830-1: libndp vulnerability
It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could use this issue to cause NetworkManager to crash, resulting in a denial of service, or possibly execute arbitrary code...
CVE-2024-30074
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...
CVE-2024-30075
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...
CVE-2024-30075
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...
CVE-2024-30074
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...
CVE-2024-30074
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...
CVE-2024-30075
CVE-2024-30075 is a Windows LLTD (Link Layer Topology Discovery Protocol) Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.0 with a vector of AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating an adjacent-network exploit with required user interaction and high impact on confidential...
