5695 matches found
SSRF check bypass in Requests utility
Description The autogpt application relies on a wrapper around the requests library in order to avoid SSRF attacks performing a check on the provided URL. Such check is performed using the urlparse function from urllib.parse library, and the request is later performed using the requests library...
The vulnerability of the SetWanSettings function in D-Link DIR-823G router software allows a hacker to execute arbitrary commands.
The vulnerability of the SetWanSettings function in D-Link DIR-823G router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the HostName parameter. Exploiting this vulnerability allows a remote attacke...
The vulnerability of the DHCP server of TP-Link’s Wi-Fi router software, the VN020 F3v(T), allows a intruder to cause a service failure.
The vulnerability of the DHCP server of TP-Link’s Wi-Fi router model VN020 F3vT lies in the issue where operations are performed outside the buffer in memory when processing the hostname parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially...
Malicious code in byted-df (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 821138aac758315c7a31a463523c4930bdd52e67699199e4c8bda0511c5907f8 Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...
pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass
A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this...
pam security update
1.3.1-36.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36272695 1.3.1-36 - pamaccess: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 1.3.1-35 - pamunix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves:...
Important: pam security update
Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: pam: libpam: Libpam vulnerable to read hashed password CVE-2024-10041 pam: Improper Hostname Interpretation in pamaccess Leads t...
Important: Red Hat Security Advisory: pam:1.5.1 security update
An update for the pam:1.5.1 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass
A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this...
pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass
A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of the "hostname" parameter on the "Capture Debug Information" page, allowing authenticated users to inject arbitrary JavaScript...
Important: pam:1.5.1 security update
Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: pam: Improper Hostname Interpretation in pamaccess Leads to Access Control Bypass CVE-2024-10963 For more details about the...
ALSA-2024:10244 Important: pam:1.5.1 security update
Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: pam: Improper Hostname Interpretation in pamaccess Leads to Access Control Bypass CVE-2024-10963 For more details about the...
webob: WebOb's location header normalization during redirect leads to open redirect
A vulnerability was found in the WebOb package. WebOb normalizes the HTTP Location header using urlparse and urljoin. If the URL starts with //, urlparse treats the following part as the hostname, and replaces the original request's hostname. This issue, combined with user interaction, may become...
TP-Link vn020-f3vt suffers from buffer overflow vulnerability
TP-LINK vn020-f3vt is a wireless modem from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link vn020-f3vt, which stems from the fact that incorrect manipulation of the parameter hostname can cause a stack-based buffer overflow. The vulnerability stems from a network system o...
Cross-site Scripting (XSS)
Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the hostname parameter in capture.inc.php, when creating a new device. PoC Pass in a...
CVE-2024-49764
CVE-2024-49764 affects LibreNMS (librenms/librenms) with a Stored XSS in the Capture Debug Information page, exploitable via the hostname parameter when creating a new device. The underlying issue is improper sanitization of the output that can execute arbitrary JavaScript in authenticated users’...
CVE-2024-11237
A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3vT TTV6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be...
TP-LINK VN020 安全漏洞
TP-LINK vn020-f3vt is a wireless modem from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link vn020-f3vt, which stems from the fact that incorrect manipulation of the parameter hostname can cause a stack-based buffer overflow. The vulnerability stems from a network system o...
