Reflecthernet: Exfiltrating 100BASE-TX Ethernet Traffic Using a Retroreflector Hardware Trojan

Electromagnetic eavesdropping is a well-established attack vector for remotely monitoring a target activity, most notably displays, over considerable ranges. Other targets have been considered resistant to such attacks or do not exhibit sufficient electromagnetic leakage for practical exploitatio...

EUVD-2023-59953

Malicious code in bioql PyPI...

SUSE CVE-2024-50097

In the Linux kernel, the following vulnerability has been resolved: net: fec: don't save PTP state if PTP is unsupported Some platforms such as i.MX25 and i.MX27 do not support PTP, so on these platforms fecptpinit is not called and the related members in fep are not initialized. However,...

Tenda HG6 3.3.0 Remote Command Injection Vulnerability

Tenda HG6 version 3.3.0 suffers from a remote command injection vulnerability. It can be exploited to inject and execute arbitrary shell commands through the pingAddr and traceAddr HTTP POST parameters in formPing, formPing6, formTracert and formTracert6 interfaces. Tenda HG6 v3.3.0 Remote Comman...

Huawei AR1220 Massive Traffic Denial of Service Vulnerability

The Huawei AR1220 is an enterprise-grade modular router from Huawei China. A security vulnerability exists in the Huawei AR1220. An attacker can exploit this vulnerability to cause an abnormal reset of the interface board through a mega traffic impact from the GE port to the FE port of the main...

Ubuntu: Security Advisory (USN-3261-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : xen (SUSE-SU-2017:0718-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-10155: The virtual hardware watchdog 'wdti6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host bsc1024183 -...

CVE-2016-9776

QEMU aka Quick Emulator built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcffecreceive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading t...

CVE-2016-9776

CVE-2016-9776 affects QEMU’s ColdFire Fast Ethernet Controller (mcf_fec_receive) and can trigger an infinite loop when processing received packets. This could allow a privileged guest user to crash the QEMU host process, causing a Denial of Service. Public advisories for related products (PowerKV...

SUSE SLES11 Security Update : kvm (SUSE-SU-2016:2902-1)

This update for kvm fixes the following issues : - Address various security/stability issues - Fix OOB access in xlnx.xpx-ethernetlite emulation CVE-2016-7161 bsc1001151 - Fix OOB access in VMware SVGA emulation CVE-2016-7170 bsc998516 - Fix DOS in ColdFire Fast Ethernet Controller emulation...

Denial of Service Vulnerability in Siemens SICAM RTU Devices

Siemens sm-2558 and sm-2556 communication modules are Fast Ethernet communication interface units for LAN/WAN. A denial of service vulnerability exists in the Siemens SICAM RTU devices. Since specially crafted packets sent to port 2404/TCP may cause the affected device to enter a flawed mode, a...

Hyperoptic (Tilgin) Router HG23xx - Multiple Vulnerabilities

Hyperoptic Tilgin Router HG23xx - Multiple Vulnerabilities Hyperoptic Tilgin Router HG23xx Multiple XSS And CSRF Vulnerabilities Vendor: Hyperoptic Ltd. | Tilgin AB Product web page: http://www.hyperoptic.com http://www.tilgin.com Affected version: HG2330, HG2302 and HG2301 Summary: Tilgin's HG23...

Default SNMP configuration issue with Foundry Networks EdgeIron 4802F

28-02-02 -- [email protected] "The EdgeIron family of Layer 2 switches is designed to provide wire-speed performance, superior port density, and complete standard Layer 2 feature sets at an aggressive price for Enterprise users." Problem: -------- Foundry Networks EdgeIron 4802F Fast...

Cisco Security Advisory: Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards Revision 1.0 For Public Release 2000 August 03 at 11:00 AM US/Eastern UTC+0400 Summary A defect in Cisco IOStm...

Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards

...