OESA-2023-1652 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark...

DDoS 2.0: IoT Sparks New DDoS Alert

The Internet of Things IoT is transforming efficiency in various sectors like healthcare and logistics but has also introduced new security risks, particularly IoT-driven DDoS attacks. This article explores how these attacks work, why they're uniquely problematic, and how to mitigate them. What I...

PT-2023-25881 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions 4.9 and prior Description: Contiki-NG is an operating system for internet-of-things devices. The issue arises during IPHC header decompression when processing IPv6 header fields. Specifically, the system fails to check if...

The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows for the execution of arbitrary code

The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Internet Bug Bounty: [curl] CVE-2023-38039: HTTP header allocation DOS

CVE-2023-38039 is a security vulnerability in the curl library that allowed a malicious server to send an unlimited number of headers in an HTTP response, causing curl to exhaust heap memory and potentially leading to a denial-of-service condition...

The vulnerability of the inet_ntoa() function in D-Link DIR-868L router software allows a hacker to trigger buffer overflow attacks.

The vulnerability of the inetntoa function in D-Link DIR-868L router software is caused by buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...

The vulnerability of the Clario antivirus software client’s VPN client relates to the lack of protection for transmitted data. This allows a hacker to send arbitrary IP traffic as plain text beyond the VPN tunnel.

The vulnerability of the Clario antivirus software’s VPN client lies in the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor to send arbitrary IP traffic as plain text outside the VPN tunnel...

CVE-2023-38148

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Remote code execution

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-38148

Mode C: CVE-2023-38148 is described in connected sources as a Windows Internet Connection Sharing (ICS) Remote Code Execution vulnerability. It is reported that an unauthenticated attacker could exploit ICS by sending a specially crafted data packet to a vulnerable system to install malware. The ...

CVE-2023-38148 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

...

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

...

Internet Explorer help

None None...

avtolandiya-internet-magazin.transteh.net Cross Site Scripting vulnerability OBB-3672190

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to sensitive...

Microsoft Windows Internet Connection Sharing (ICS) security vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Internet Connection Sharing ICS. An attacker exploiting this vulnerability could remotely execute code. The...

PT-2023-5095 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the implementation of the TCP/IP protocol in Windows operating systems. This can allow an attacker to gain unauthorized...

PT-2023-5062 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This can be exploited by a remote attacker to execute...

[SECURITY] [DSA 5495-1] frr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5495-1 [email protected] https://www.debian.org/security/ Aron Xu September 11, 2023 https://www.debian.org/security/faq -...

The vulnerability of the AtlasVPN client, related to the execution of functions from an unreliable controlled area, allows a hacker to obtain user IP addresses.

The vulnerability of the AtlasVPN client relates to the execution of functions from an untrusted controlled area. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user IP addresses...