Tenda AC8 /goform/SetFirewallCfg Buffer Overflow Vulnerability

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

Design/Logic Flaw

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of log.Fatalf, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an...

CVE-2023-40586 go package github.com/corazawaf/coraza is vulnerable to denial of service

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of log.Fatalf, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an...

CVE-2023-40586 go package github.com/corazawaf/coraza is vulnerable to denial of service

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of log.Fatalf, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an...

CVE-2023-40585 Unauthenticated access to Ironic API

ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not have API and Conductor split into separate services, access to the API is not protected by any authentication. Ironic API is also listenin...

CVE-2023-40585 Unauthenticated access to Ironic API

ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not have API and Conductor split into separate services, access to the API is not protected by any authentication. Ironic API is also listenin...

OWASP Coraza WAF 资源管理错误漏洞

OWASP Coraza WAF is a golang modsecurity-compatible web application firewall library in the Coraza open source. A resource management error vulnerability exists in OWASP Coraza WAF version 3.0.0, which stems from misuse of log.Fatalf and causes applications using coraza to crash after receiving a...

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

PT-2023-27685

Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Zyxel CPE affected versions not specified Description A stack overflow issue was discovered in Tenda AC8 via the firewallEn parameter at the "/goform/SetFirewallCfg" API endpoint. For Zyxel CPE...

Cisco FXOS Software 安全漏洞

Cisco FXOS Software is a suite of firewall software from Cisco that runs in Cisco security appliances. A security vulnerability exists in Cisco FXOS Software that stems from a failure to validate the parameters of a CLI command, resulting in an arbitrary file write vulnerability. An attacker coul...

The vulnerability of the net/sched component in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the net/sched component of the Linux operating system’s kernel is related to the repeated use of previously freed memory in the function fwchange within the net/sched/clsfw.c module, as well as the use of u32initknode in net/sched/clsu32 and route4change in...

SUSE-RU-2023:3370-1 Recommended update for rsync

This update for rsync fixes the following issues: - Update to version 3.2.3 jscSLE-21252, jscPED-3146 - Add support for using --atimes to preserve atime of files in destination sync jscPED-3145 - Remove SuSEfirewall2 service as this was replaced by firewalld which already provides a rsyncd servic...

PT-2023-8524 · D Link · D-Link R15

Name of the Vulnerable Software and Affected Versions: D-Link R15 versions prior to 1.08.02 Description: The issue is related to a lack of firewall restrictions for IPv6 traffic, allowing attackers to access services running on the device that may be listening via IPv6. This can enable unauthoriz...

Test the communication between DDC and SQL with an .udl file

If you would like to test if the communication between DDC and SQL is working fine, outside Citrix, you can create an .udl file on desktop and try to access the SQL server using the required username and password. If the communication completes successfully, you can continue troubleshooting from...

MOXA TN-4900 and TN-5900 Command Injection Vulnerability (CNVD-2023-64097)

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to delete arbitrary files...

MOXA TN-4900 and TN-5900 Command Injection Vulnerability (CNVD-2023-64095)

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to execute remote code on an affected...