5107 matches found
CVE-2023-37717
Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...
Tenda F1202 缓冲区错误漏洞
The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeUrlFilter method...
Tenda F1202 缓冲区错误漏洞
The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeClientFilter method...
CVE-2023-32054
creationtimestamp| type| source ---|---|--- 2023-07-11 22:36:06+00:00| seen| https://t.me/cibsecurity/66436 2026-07-29 12:03:17+00:00| seen| https://t.me/sysadminup/2119 2026-07-30 00:03:03+00:00| seen| https://t.me/sysadminup/2119 2026-08-04 01:00:03+00:00| published-proof-of-concept|...
CVE-2023-3089
creationtimestamp| type| source ---|---|--- 2023-07-05 16:11:48+00:00| seen| https://t.me/cibsecurity/65965...
CVE-2023-37204
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...
impl `FromMdbValue` for bool is unsound
The implementation of FromMdbValue have several unsoundness issues. First of all, it allows to reinterpret arbitrary bytes as a bool and could make undefined behavior happen with safe function. Secondly, it allows transmuting pointer without taking memory layout into consideration. The details of...
SUSE CVE-2023-2829
A named instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache RFC 8198 option synth-from-dnssec enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through...
SUSE SLES15: bind / bind-chrootenv / bind-devel / bind-devel-32bit / bind-doc / etc (SUSE-SU-2023:2578-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2578-1 advisory. bind: - Provide bind dependencies and solve installation issues on SUSE Linux Enterprise Micro - There are no source...
CVE-2023-2829
A named instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache RFC 8198 option synth-from-dnssec enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through...
Stack overflow
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273...
Where from, Where to — The Evolution of Network Security
For the better part of the 90s and early aughts, the sysadmin handbook said, "Filter your incoming traffic, not everyone is nice out there " later coined by Gandalf as "You shall not pass ". So CIOs started to supercharge their network fences with every appliance they could get to protect against...
SUSE CVE-2023-33864
StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...
PT-2023-24520 · Renderdoc · Renderdoc
Name of the Vulnerable Software and Affected Versions: RenderDoc versions prior to 1.27 Description: The issue is related to an Integer Overflow that results in a Buffer Overflow. This occurs because the StreamReader::ReadFromExternal function in RenderDoc uses uint32 tm BufferSize-m InputSize ev...
Copy_from_user Spectre-V1 Gadget in Linux Kernel
...
Tenda AC6 fromDhcpListClient function stack buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a stack buffer overflow vulnerability, which originates from the fromDhcpListClient function resulting in a stack-based buffer overflow...
Default credentials
In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006...
The vulnerability of the ComponentModel Profile.FromFile() function in the application programming complex of the PLC CODESYS Development System allows a perpetrator to execute arbitrary commands.
The vulnerability of the ComponentModel Profile.FromFile function in the CODESYS Development System application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Meet 'Jack' from Romania! Mastermind Behind Golden Chickens Malware
The identity of the second threat actor behind the Golden Chickens malware has been uncovered courtesy of a "fatal" operational security blunder, cybersecurity firm eSentire said. The individual in question, who lives in Bucharest, Romania, has been given the codename Jack. He is one of the two...