14559 matches found
TerraMaster TOS security vulnerabilities
TerraMaster TOS is a Linux-based operating system dedicated to the TerraMaster Cloud Storage NAS server from China's TerraMaster Corporation. TerraMaster TOS has a security vulnerability that can be exploited by an attacker executing a request to the /module/api.php?mobile/wapNasIPS endpoint to...
CVE-2021-45839
CVE-2021-45839 affects TerraMaster TOS 4.2.x on F4-210/F2-210. The vulnerability enables disclosure of sensitive data by issuing a request to /module/api.php?mobile/webNasIPS, exposing the first administrator hash and other details (MAC address, internal IP). Connected documents describe an explo...
admin.ethereumpostage.info Cross Site Scripting vulnerability OBB-2546045
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-30187
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2022-29575
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2022-30683
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-29883
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2022-29576
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A NULL pointer dereference issue was found in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-30290
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30754
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30474
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30403
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-30399
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-30186
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists due to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-29880
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
CVE-2022-28443
creationtimestamp| type| source ---|---|--- 2022-04-22 00:27:15+00:00| seen| https://t.me/cibsecurity/41272...
Google Android Information Disclosure Vulnerability (CNVD-2022-44585)
Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which originates in LoadedPackage::Load in LoadedArsc.cpp, and due to a lack of boundary checking, an out-of-bounds read may occur. read. An attacker...
TP-LINK WR-886N Router Code Execution
The vulnerability of the /cloudconfig/routerpost/upgradeinfo function in TP-LINK’s WR-886N router software arises due to a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by using a specially crafted request...
CVE-2021-3681
A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the buildignore list in "galaxy.yml" include files in the .tar.gz file. This contains sensitive info, such as the user's Ansible Galaxy A...
