38714 matches found
CVE-2023-25643 Two Vulnerabilities in Some ZTE Mobile Internet Products
There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands...
CVE-2023-25642
CVE-2023-25642 concerns a buffer overflow in ZTE mobile internet products, notably the ZTE MC801A 5G indoor WiFi router, caused by insufficient validation of the TCP port parameter. An authenticated attacker could trigger a denial of service by submitting a crafted request to the affected device....
CVE-2023-25651
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak...
Sql injection
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak...
CVE-2023-25651 SQL Injection Vulnerability in Some ZTE Mobile Internet Products
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak...
CVE-2023-25651
CVE-2023-25651 affects some ZTE mobile internet products due to insufficient input validation of the SMS interface parameter, enabling an authenticated attacker to perform SQL injection and cause information leakage. Concrete details across sources: vulnerable component is the SMS interface handl...
The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows a hacker to cause a service failure
The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2023-20204 · Zte · Zte Mobile Internet
Name of the Vulnerable Software and Affected Versions: ZTE mobile internet products affected versions not specified Description: The issue is related to a command injection vulnerability due to insufficient input validation of multiple network parameters. An authenticated attacker could exploit...
PT-2023-20203 · Zte · Zte Mobile Internet
Name of the Vulnerable Software and Affected Versions: ZTE mobile internet products affected versions not specified Description: The issue is related to a buffer overflow vulnerability due to insufficient validation of the tcp port parameter. This could allow an authenticated attacker to perform ...
The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Hacker Group Linked to Russian Military Claims Credit for Cyberattack on Kyivstar
A hacker group calling itself Solntsepek—previously linked to Russia’s notorious Sandworm hackers—says it carried out a disruptive breach of Kyivstar, a major Ukrainian mobile and internet provider...
Microsoft Internet Explorer Memory Corruption Vulnerability (KB5033376)
This host is missing an important security update according to Microsoft KB5033376 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Windows Multiple Vulnerabilities (KB5033369)
This host is missing an important security update according to Microsoft KB5033369 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
PT-2023-12930 · Curl · Curl
Name of the Vulnerable Software and Affected Versions: curl affected versions not specified Description: The issue concerns a cyber espionage campaign, specifically the KV-botnet investigation. It involves various threats, including Kv-botnet, Beacon, Zuo rat, Hiatusrat, and Imminentmonitor rat...
Microsoft Windows Multiple Vulnerabilities (KB5033379)
This host is missing a critical security update according to Microsoft KB5033379 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Patch Tuesday, December 2023 Edition
The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known "zero-day" threats targeting any of the vulnerabilities in Decembers...
Patch Tuesday - December 2023
Microsoft is addressing 34 vulnerabilities this December Patch Tuesday, including a single zero-day vulnerability and three critical remote code execution RCE vulnerabilities. December Patch Tuesday has historically seen fewer patches than a typical month, and this trend continues in 2023. This...
