PT-2022-28475

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue is related to an invalid parameter check in the msm dsi phy enable function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28381

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description The issue is related to an invalid parameter check in the msm dsi phy enable function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28406

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description The issue is related to an invalid parameter check in the msm dsi phy enable function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

The vulnerability of the implementation of the SetStationSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetStationSettings function in the microprogrammed software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the stationaccessenable parameter. Exploiting this vulnerability allows a...

SQLRecon - A C# MS SQL Toolkit Designed For Offensive Reconnaissance And Post-Exploitation

A C MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki. Usage You can grab a copy of SQLRecon from the releases page. Alternatively, feel free to compile the solution yourself This should be as straight...

CVE-2021-46455

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the stationaccessenable parameter...

CVE-2021-46455

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the stationaccessenable parameter...

D-Link Dir-823-Pro 命令注入漏洞

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 contains a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the stationaccessenable parameter...

CLSA-2022-1643918500 Fix of CVE: CVE-2022-23305

CVE-2022-23305: disable JDBCAppender by default. Add optional parameter for enabling it...

CLSA-2022-1643918279 Fixed CVE-2022-23305 in log4j

CVE-2022-23305: disable JDBCAppender by default. Add optional parameter for enabling it...

PT-2022-7672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a refcount leak in the stm32 usbphyc pll enable function. This function is part of the Linux kernel's phy module, specifically in the...

PT-2022-1549

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to the implementation of the SetStationSettings function in the D-Link DIR-823-Pro wireless router's firmware, which is associated with insufficient input data sanitization when...

Vulnerability fixed in ClamAV

A vulnerability has been fixed in ClamAV. A malicious party could potentially exploit the vulnerability to cause a denial-of-service cause by having a rogue file opened by the parser in the application. The clamscan --gen-json function must be enabled. -= ClamAV =- Cisco has released updates to f...

PT-2022-10306

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 version 1.0.1 Description The China Mobile An Lianbao WF-1 router provides a web interface at the "/api/ZRMesh/set ZRMesh" endpoint, which receives parameters by POST request. The mesh enable and mesh device...

PT-2024-11796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an invalid parameter check in the msm dsi phy enable function, where the phy input parameter is used before being checked. This can lead to a possible NULL pointe...

UBUNTU-CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress...

PT-2025-37624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the rtc subsystem, specifically within the msc313 rtc probe function. A function prototype mismatch exists when calling clk disable unprepare, which...

GSD-2021-1002758 usb: xhci-mtk: fix list_del warning when enable list debug

usb: xhci-mtk: fix listdel warning when enable list debug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

Vulnerability found in Moxa MGate

A vulnerability has been found in Moxa MGate. The vulnerability allows an unauthenticated remote malicious person to obtain obtain sensitive data. The vulnerable Moxa MGate series have vulnerable firmware that makes it possible for an attacker to intercept the traffic and then decrypt the login...

Medium: kernel-livepatch-4.14.248-189.473

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.248-189.473 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.248-189.473 or yum update --advisory ALAS2LIVEPATCH-2021-071 to update your system. New...