Exploit for CVE-2024-9441

CVE-2024-9441-POC CVE-2024-9441 is a command injection vulner...

Exploit for OS Command Injection in Zimbra Collaboration

CVE-2024-45519 CVE-2024-45519 is a high-risk vulnerability in...

Exploit for Missing Authentication for Critical Function in Alibaba Nacos

Introduction The Nacos Derby command execution vulnerability...

CVE-2024-51073

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. NOTE: this is disputed by the Supplier because the findings came from a potentially unrealistic test environment a...

CVE-2024-51073: Undefined Security Weakness

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. NOTE: this is disputed by the Supplier because the findings came from a potentially unrealistic test environment a...

qca Component DoS

The vulnerability of the qca component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the qcapreventwake function. Exploiting this vulnerability can allow an attacker to cause a service failure...

LLama Factory Remote OS Command Injection Vulnerability

Summary A critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure...

GHSA-HJ3W-WRH4-44VP LLama Factory Remote OS Command Injection Vulnerability

Summary A critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure...

TOTOLINK X5000R A7000R Parental Rules DoS

The vulnerability of the setParentalRules function in TOTOLINK X5000R and A7000R router microprogramming systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a specially crafted PO...

Linux kernel DRM GMA500 DoS

The vulnerability of the DRM/GMA500 components in Linux operating systems is related to incorrect blocking in the gmacrtcpageflip function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

mchp-pci1xxx Component DoS

The vulnerability of the mchp-pci1xxx component in the Linux operating system is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel io_uring/kbuf DoS

The vulnerability of the iouring/kbuf components in Linux operating systems is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Tenda AC15 Router Code Execution

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName in the Tenda AC15 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability could allow a...

CODESYS V3 Full Access

The vulnerability of CODESYS V3 microprogramming software for WAGO controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full access to the controller or cause service failures...

Palo Alto Networks PAN-OS Pointer Arithmetic DoS

The vulnerability of Palo Alto Networks’ operating system PAN-OS relates to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel components is related to double-freeing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

iwlwifi DoS

The vulnerability of the iwlwifi component in the Linux operating system is related to the lack of memory release after the effective service life in the function iwlrfigetfreqtable. Exploiting this vulnerability can allow an attacker to cause a service failure...

riscv Linux Kernel DoS

The vulnerability in the riscv component of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Netgear R7000P genie_pptp.cgi DoS

The vulnerability in the geniepptp.cgi script of the Netgear R7000P router operating system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows an attacker to cause a service...

Linux kernel net/rds DoS

The vulnerability of the net/rds components of the Linux operating system’s kernel is related to the assignment of the NULL pointer in the rdsrdmamap function. Exploiting this vulnerability can allow an attacker to cause a service failure...