CVE-2023-21547

CVE-2023-21547 is a vulnerability in the Windows Internet Key Exchange (IKE) Extension causing a Denial-of-Service. Multiple connected sources identify it as a network-‑accessible issue in the IKE protocol that can be triggered remotely without user interaction, with the root cause described as a...

CVE-2023-21677

Technical details (affected products, root cause, exploitability, and fixes) for CVE-2023-21677 are not provided in the supplied documents. No specifics on impact or remediation are present. Monitor for updates.

CVE-2023-21758

Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.

CVE-2023-21677 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

Microsoft Windows IKE Extension 安全漏洞

Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. An attacker could exploit this vulnerability to cause a denial of service on the system...

CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

CVE-2023-21683 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

PT-2023-1137 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Internet Key Exchange IKE protocol and is caused by insufficient input validation. This can be exploited by a remote attacker using specially crafted packets to...

PT-2023-1087 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Internet Key Exchange IKE protocol in Windows operating systems, specifically due to insufficient input validation. This can be exploited b...

WhatsApp Subverts Censorship with New Proxy Feature

By Habiba Rashid The new feature is specifically meant to help people maintain access to WhatsApp even if they are living in a repressive regime where internet shutdowns are common. This is a post from HackRead.com Read the original post: WhatsApp Subverts Censorship with New Proxy Feature...

Happy 20th Birthday TaoSecurity Blog

Happy 20th birthday TaoSecurity Blog, born on 8 January 2003. Thank you Blogger Blogger now part of Google has continuously hosted this blog for 20 years, for free. I'd like to thank Blogger and Google for providing this platform for two decades. It's tough to find extant self-hosted security...

Exploit for Command Injection in Zte Mf286R_Firmware

CVE-2022-39073 Firmware details: wainnerversion: BDPO...

CVE-2022-39072

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks...

CVE-2022-39072

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks...

Remote Vulnerabilities in Automobiles

This group has found a ton of remote vulnerabilities in all sorts of automobiles. Its enough to make you want to buy a car that is not Internet-connected. Unfortunately, that seems to be impossible...

OESA-2023-1010 net-snmp security update

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. The suite includes: - An extensible agent for responding to SNMP queries including built-in support for a wide range of MIB information modules - Command-line applications to retrieve and...

WhatsApp Introduces Proxy Support to Help Users Bypass Internet Censorship

Popular instant messaging service WhatsApp has launched support for proxy servers in the latest version of its Android and iOS apps, letting users circumvent government-imposed censorship and internet shutdowns. "Choosing a proxy enables you to connect to WhatsApp through servers set up by...

CVE-2022-39072

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks...

CVE-2022-39072

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks...

CVE-2022-39072

CVE-2022-39072 concerns a SQL injection in Some ZTE Mobile Internet products stemming from insufficient validation of SNTP interface parameters. The issue is exploitable by an authenticated attacker and could lead to stored XSS in affected contexts. The documented CVSSv3.1 impact is Low confident...