CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44625

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloudconfig/clouddevice/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request...

CVE-2021-44625

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloudconfig/clouddevice/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request...

Qakbot Botnet Sprouts Fangs, Injects Malware into Email Threads

The Qakbot botnet is getting more dangerous, sinking its fangs into email threads and injecting malicious modules to pump up the core botnet’s powers. On Thursday, Sophos published a deep dive into the botnet, describing how researchers have recently seen it spreading through email thread hijacki...

TP-Link WR886N security vulnerabilities

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 version 2.3.8, which stems from the /cloudconfig/routerpost/upgradeinfo function when executing operations on memory that do not properly validate data boundaries, an...

PT-2022-2267

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/upgrade info feature, allowing malicious users to execute arbitrary code on the system via a crafted post request. This is cause...

PT-2022-2226

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/cloud device/info interface, allowing a malicious user to execute arbitrary code on the system via a crafted post request. This is caused by...

CVE-2021-44625: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloudconfig/clouddevice/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request...

nbd buffer overflow vulnerability

nbd is a Linux kernel network block device tool. It is used to use remote block devices over TCP/IP networks. nbd versions prior to 3.24 of nbd-server suffer from a buffer overflow vulnerability that can be exploited by an attacker to cause a parsing buffer overflow in the name field by sending a...

UBUNTU-CVE-2022-26496

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message with an large value as the length of the name...

CVE-2021-3656: Missing Authorization

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

PT-2022-10740 · Unknown · Basebmpsupportlib

Name of the Vulnerable Software and Affected Versions: BaseBmpSupportLib affected versions not specified Description: The issue is related to a Heap Overflow in BaseBmpSupportLib. No information is provided about the estimated number of potentially affected devices worldwide or real-world inciden...

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document...

AZL-37005 CVE-2021-3738 affecting package samba for versions less than 4.18.3-1

In DCE/RPC it is possible to share the handles cookies for resource state between multiple connections via a mechanism called 'association groups'. These handles can reference connections to our sam.ldb database. However while the database was correctly shared, the user credentials state was only...

WordPress Server Info plugin <= 2.5.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Server Info plugin versions = 2.5.3. Solution No patched version available...

WordPress GA4WP: Google Analytics for WordPress plugin < 1.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress GA4WP: Google Analytics for WordPress plugin versions 1.3. Solution Update the WordPress GA4WP: Google Analytics for WordPress plugin to the latest available version at least 1.3...

WordPress WordPress Cloaking – Show & Create Geo-Targeted Custom HTML Plugin – GeoRequest plugin <= 0.1.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Cloaking – Show & Create Geo-Targeted Custom HTML Plugin – GeoRequest plugin versions = 0.1.9. Solution No patched version available...

WordPress Server Info plugin <= 2.5.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Server Info plugin versions = 2.5.3. Solution No patched version available...

DRAKVUF Sandbox - Automated Hypervisor-Level Malware Analysis System

DRAKVUF Sandbox is an automated black-box malware analysis system with DRAKVUF engine under the hood, which does not require an agent on guest OS. This project provides you with a friendly web interface that allows you to upload suspicious files to be analyzed. Once the sandboxing job is finished...