PT-2022-29676

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the tcp protocol in the Linux Kernel, where the inet listen hashbucket::lock is not properly acquired when BH is disabled. The actual impact and attack plausibility ha...

PT-2022-4538 · General Electric · Inet +4

Name of the Vulnerable Software and Affected Versions: General Electric Renewable Energy iNET versions prior to 8.3.0 General Electric Renewable Energy iNET II versions prior to 8.3.0 General Electric Renewable Energy SD versions prior to 6.4.7 General Electric Renewable Energy TD220X versions...

PT-2022-7470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel infoleak in the Linux kernel's SCTP sockets. The problem occurs when the inet sctp diag fill function calls inet diag msg common fill, and the r-idiag...

PT-2023-5341

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description A flaw was found in glibc, where the gaih inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is...

Europol Shuts Down VPNLab, Cybercriminals' Favourite VPN Service

VPNLab.net, a VPN provider that was used by malicious actors to deploy ransomware and facilitate other cybercrimes, was taken offline following a coordinated law enforcement operation. Europol said it took action against the misuse of the VPN service by grounding 15 of its servers on January 17 a...

GSD-2021-1002822 inet: fully convert sk->sk_rx_dst to RCU rules

inet: fully convert sk-skrxdst to RCU rules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

PT-2021-27290

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.12 Description The issue is related to the conversion of sk-sk rx dst to RCU rules in the inet code. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a kernel-infoleak for UDP sockets in the inet diag module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-8137

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5-syzkaller Description The vulnerability is related to the use of RCU protection in the Linux kernel's inet component without clear documentation. Specifically, the sequences in tcp v4 do rcv and tcp v6...

CVE-2021-44148

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/routercgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name...

CVE-2021-44148

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/routercgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name...

The vulnerability of the systeminformation library in the Node.js software platform allows a hacker to execute arbitrary code.

The vulnerability of the systeminformation library in the Node.js software platform is related to errors in transmitting data to the parameters of the si.inetLatency, si.inetChecksite, si.services, and si.processLoad services. Exploiting this vulnerability allows a remote attacker to execute...

PT-2021-1504 · Google +6 · Android Kernel +6

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to the implementation of the ip check mc rcu function in the Inet Sockets component of the Android kernel, which involves the use of memory after it has...

Four Plead Guilty to Aiding Cyber Criminals with Bulletproof Hosting

Four Eastern European nationals face 20 years in prison for Racketeer Influenced Corrupt Organization RICO charges after pleading guilty to providing bulletproof hosting services between 2008 and 2015, which were used by cybercriminals to distribute malware to financial entities across the U.S. T...

CVE-2020-28150

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect...

DEBIAN-CVE-2021-21315

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

PT-2021-7658

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.3.1 Description The System Information Library for Node.JS is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1, the...

Cybercriminals' Favorite Bulletproof VPN Service Shuts Down In Global Action

Law enforcement agencies from the US, Germany, Netherlands, Switzerland, France, along with Europol's European Cybercrime Centre EC3, announced today the coordinated takedown of Safe-Inet, a popular virtual private network VPN service that was used to facilitate criminal activity. The three domai...

GHSA-M57P-P67H-MQ74 Command Injection Vulnerability in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.31.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetLatency For more information If you have any...

CVE-2020-8941

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedinetpton using an attacker controlled klinuxaddrbuffer parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended...