Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (V2.103.000.051) and Modules

Summary A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender Agent V2.103.000.051 and Modules. Vulnerability Details CVEID: CVE-2021-22890 DESCRIPTION: cURL libcurl is vulnerable to a man-in-the-middle attack, caused by a session tickets confusing issue when using a HTT...

Black Box Kvm Extender 3.4.31307 - Local File Inclusion Exploit

Exploit Title: Black Box Kvm Extender 3.4.31307 - Local File Inclusion Exploit Author: Ferhat Çil Vendor Homepage: http://www.blackbox.com/ Software Link: https://www.blackbox.com/en-us/products/black-box-brand-products/kvm Version: 3.4.31307 Category: Webapps Tested on: Linux Description: Any us...

Black Box Kvm Extender 3.4.31307 - Local File Inclusion

Exploit Title: Black Box Kvm Extender 3.4.31307 - Local File Inclusion Date: 05.07.2021 Exploit Author: Ferhat Çil Vendor Homepage: http://www.blackbox.com/ Software Link: https://www.blackbox.com/en-us/products/black-box-brand-products/kvm Version: 3.4.31307 Category: Webapps Tested on: Linux...

Unauthorized Access Vulnerability in Wireless Signal Extender of Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Wireless Signal Extender has an unauthorized access vulnerability that can be exploited b...

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

Design/Logic Flaw

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

CVE-2021-30357

CVE-2021-30357 affects SSL Network Extender Client for Linux prior to build 800008302. The SNX binary runs with root privileges and can disclose parts of the supplied SNX config file, enabling partial exposure of files the user should not access (e.g., sensitive system contents). Public PoCs demo...

PT-2021-18719 · Unknown · Ssl Network Extender Client

Name of the Vulnerable Software and Affected Versions: SSL Network Extender Client for Linux versions prior to build 800008302 Description: The issue allows partial disclosure of files to which the user did not have access, due to the revelation of part of the contents of the configuration file...

CVE-2021-30357: Generation of Error Message Containing Sensitive Information

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

Security Bulletin: Buffer Overflow Vulnerability in IBM SDK Affects IBM Transformation Extender

Summary A vulnerability in IBM SDK, Java Technology Edition Quarterly CPU - Jan 2021 affects IBM Transformation Extender. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting...

Security Bulletin: IBM SDK Java Quarterly CPU Oct 2020 Vulnerabilities Affect IBM Transformation Extender

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Oct 2020 - Includes Oracle Oct 2020 CPU plus one additional vulnerability that affect IBM Transformation Extender. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in Java SE...

D-Link DAP-2020 安全漏洞

The D-Link DAP-2020 is a WiFi range extender from D-Link, a Taiwan-based company.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by IETF RFC 793. A command injection vulnerability exists in D-Link DAP-2020...

Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (CVE-2020-13434, CVE-2020-13435)

Summary A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender Vulnerability Details CVEID: CVE-2020-13435 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by flaw in the sqlite3ExprCodeTarget function in expr.c. By sending a specially-crafted request, a...

D-Link DAP-1860 Remote Code Execution Vulnerability (CNVD-2022-38538)

The D-Link DAP-1860 is a WiFi range extender from D-Link, a Taiwan-based company. The D-Link DAP-1860 is vulnerable to a remote code execution vulnerability that could be exploited by attackers to elevate privileges and execute code in the device context...

D-Link DAP-1860 Remote Code Execution Vulnerability (CNVD-2022-38539)

The D-Link DAP-1860 is a WiFi range extender from D-Link, a Taiwan-based company. A remote code execution vulnerability exists in the D-Link DAP-1860, which stems from a network system or product that does not properly filter external input data during the construction of executable commands, and...

CVE-2020-27865

The CVE-2020-27865 entry concerns the D-Link DAP-1860 WiFi extender (firmware 1.04B03). A flaw in the uhttpd service causes incorrect string matching when accessing protected pages, enabling network-adjacent attackers to bypass authentication and execute arbitrary code with device privileges. Mul...

CVE-2020-27864

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...