PT-2022-27143 · Gl.Inet · Gl.Inet Goodcloud

Name of the Vulnerable Software and Affected Versions: GL.iNet Goodcloud version 1.0 Description: The issue is related to an insecure design in the software, which allows a remote attacker to access the devices' admin panel. Recommendations: For GL.iNet Goodcloud version 1.0, consider restricting...

Exploit for OS Command Injection in Gl-Inet Gl-Mt300N-V2_Firmware

cve-2022-31898 Exploit POC code for CVE-2022-31898, a command...

PT-2022-26225 · Gl.Inet · Gl.Inet Goodcloud Iot Device Management System

Name of the Vulnerable Software and Affected Versions: GL.iNet GoodCloud IoT Device Management System version 1.00.220412.00 Description: The issue concerns command injection vulnerabilities in the ping and traceroute tools of the system, allowing attackers to read arbitrary files on the system...

PT-2022-20978 · Gl.Inet · Gl-Inet Gl-Ax1800 Flint +1

Name of the Vulnerable Software and Affected Versions: gl-inet GL-MT300N-V2 Mango version 3.212 gl-inet GL-AX1800 Flint version 3.214 Description: The issue concerns command injection vulnerabilities. These vulnerabilities can be exploited via the ping addr and trace addr function parameters...

CVE-2022-31898

CVE-2022-31898 affects GL.iNet GL-MT300N-V2 Mango (v3.212) and GL-AX1800 Flint (v3.214). The issue is described as multiple command-injection vulnerabilities exploitable via the ping_addr and trace_addr parameters. Reported impact in the CVE metrics indicates high confidentiality, integrity, and ...

CVE-2022-31898: Improper Neutralization of Special Elements used in an OS Command

gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the pingaddr and traceaddr function parameters...

UBUNTU-CVE-2022-3567

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6streamops/inet6dgramops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the...

The vulnerability of microprogrammed software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX models is related to uncontrolled resource consumption. This vulnerability allows a perpetrator to cause malfunctions in the equipment.

The vulnerability of microprogrammed software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX models is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause malfunctions in t...

The vulnerability in the implementation of the ip_check_mc_rcu() function in the Inet Sockets component of Android kernel allows a perpetrator to escalate their privileges.

The vulnerability of the implementation of the ipcheckmcrcu function in the Inet Sockets component of Android operating systems lies in the use of memory after it is freed due to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the microprogramming software in General Electric’s renewable energy iNET and iNET II industrial software-hardware equipment, related to the storage of passwords in an unencrypted form, allows a hacker to view the contents of the configuration file and gain access to the passwords.

The vulnerability of the microprogramming software in General Electric’s renewable energy iNET and iNET II industrial software-hardware equipment lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a hacker to view the contents of configuration files...

PT-2025-8704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the protection check for psock vs ULP. The inet csk has ulpsk check was moved from sk psock init to the new...

CVE-2022-20141

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Design/Logic Flaw

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20141

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

UBUNTU-CVE-2022-20141

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20141

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20141: Concurrent Execution using Shared Resource with Improper Synchronization

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

ASB-A-112551163

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation...

inet-sochi.ru Cross Site Scripting vulnerability OBB-2618793

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-30283

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to the acquisition of inet listen hashbucket::lock with disabled BH in the tcp component. The actual impact and attack plausibility have not yet been proven...