20 matches found
CVE-2026-7161 GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...
EUVD-2016-8327
Malware in sbrugna...
EUVD-2013-6507
Malware in sbrugna...
EUVD-2022-28120
Malicious code in bioql PyPI...
CVE-2025-57438
The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifyi...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-065)
The version of kernel installed on the remote host is prior to 5.10.219-208.866. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-065 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP...
CVE-2022-29473
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual server, undisclosed responses can cause Traffic Management MicrokernelTMM to terminate. Note: Software versions which have...
CVE-2021-23012
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support functionality may allow users granted either "Resource Administrator" or "Administrator" roles to execute arbitrary bash...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
Cve-2020-5029-finder It is a small script to fetch out the s...
LG Smart IP Device Default Credentials (HTTP)
The administrator account on LG Smart IP Devices uses the default username SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2018-5513
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impact...
CVE-2016-7474
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information...
F5 Networks BIG-IP : BIG-IP ASM and PSM remote buffer overflow exploit (SOL10417)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL10417. The text description of this plugin is C F5 Networks...
CacheGuard-OS 5.7.7 - CSRF Vulnerability
Exploit for linux platform in category web applications I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL...
SpamTitan 6.01 Cross Site Scripting
I. VULNERABILITY ------------------------- Reflected XSS in SpamTitan 6.01 II. BACKGROUND ------------------------- SpamTitan offers the best protection for your email on the market. We consistently block more than 99.9% of all spam and have independent comparative tests and awards to show this...
CVE-2013-6705
The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...
Memory corruption
The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...
CVE-2013-6705
The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...
CVE-2013-6705
Cisco IOS and IOS XE IP Device Tracking (IPDT) is affected by CVE-2013-6705, allowing remote, unauthenticated attackers to trigger a denial-of-service that leads to an IPDT AVL corruption and device reload via a crafted sequence of ARP packets (Bug CSCuh38133). The linked sources describe the vul...