UBUNTU-CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

Slixmpp -- Lack of SSL Certificate hostname validation in XMLStream

NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

Command injection

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

CVE-2022-45711

Affected product: IP-COM M50 router, version 15.11.0.33(10768). Vulnerability: command injection via the hostname parameter in the formSetNetCheckTools function. Root cause / impact: underlying issue allows arbitrary command execution with network access, with high impact across confidentiality, ...

PT-2022-27620 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered in the formSetNetCheckTools function via the hostname parameter. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to th...

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

PT-2022-27625 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A command injection issue was found via the hostname parameter in the formSetNetCheckTools function. This allows for potential command injection attacks. Recommendations: For IP-COM M50 version...

IP-COM M50 操作系统命令注入漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in the IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in the IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the hostname parameter in the formSetNetCheckTools function...

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

Clean up stale Azure AD devices with script

Under normal circumstances, when powering off Azure Active Directory AAD joined non-persistent VM, MCS agent inside VM will perform Azure AD leave and remove device record from Azure Active Directory. Occasionally, the action may fail, it will leave stale device in Azure AD. Recently, Azure AD...

MGASA-2022-0469 Updated python-slixmpp packages fix security vulnerability

Fixes missing certificate hostname validation...

Updated python-slixmpp packages fix security vulnerability

Fixes missing certificate hostname validation...

Man-in-the-Middle (MitM)

org.apache.bookkeeper:bookkeeper-server is vulnerable to man-in-the-middleMitM attack. The vulnerability is due to the connection not terminating when TLS hostname verification fails which allows an attacker to position themselves in between the user and the remote server...