747 matches found
PT-2024-10644
Name of the Vulnerable Software and Affected Versions Meta CCAP Para.cpp affected versions not specified Description The issue is related to a possible out of bounds write in the FT ACDK CCT V2 OP ISP SET TUNING PARAS function of Meta CCAP Para.cpp due to improper input validation. This could lea...
CVE-2024-20112
In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...
CVE-2024-10751
A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...
CVE-2024-20112
MediaTek Chipsets are affected by a security vulnerability in the isp component caused by a missing bounds check, leading to a possible out-of-bounds read . An attacker exploiting this issue could cause a local denial of service , though the exploit requires System execution privileges and user i...
CVE-2024-20112
In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...
CVE-2024-10751 Codezips ISP Management System pay.php sql injection
A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...
CVE-2024-10751 Codezips ISP Management System pay.php sql injection
A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...
CVE-2024-10751
CVE-2024-10751 affects Codezips ISP Management System 1.0. The vulnerability is in the file pay.php, where manipulating the “customer” parameter yields a SQL injection. The issue can be exploited remotely, and multiple sources confirm the exploit has been disclosed publicly. Technical details con...
CVE-2024-20112: Out-of-bounds Read
In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...
CVE-2024-10751: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...
PT-2024-16514 · Unknown · Codezips Isp Management System
Name of the Vulnerable Software and Affected Versions: Codezips ISP Management System version 1.0 Description: A critical issue was found in the Codezips ISP Management System, affecting some unknown functionality of the file pay.php. The manipulation of the customer argument leads to SQL...
Malware in @isp-frontend-library/melidata
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2023-48957
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...
CVE-2023-48957
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...
CVE-2023-48957: Exposure of Sensitive Information to an Unauthorized Actor
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...
CVE-2023-48957
CVE-2023-48957 concerns the PureVPN Linux client (2.0.2-Productions) where the DNS query handling is flawed, allowing DNS requests to bypass the VPN tunnel and go directly to the ISP/default DNS servers. The root cause is an improper DNS query handling/control flow in the client, per connected ad...
China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates
The China-linked threat actor known as Evasive Panda compromised an unnamed internet service provider ISP to push malicious software updates to target companies in mid-2023, highlighting a new level of sophistication associated with the group. Evasive Panda, also known by the names Bronze Highlan...
Major ISP Accused of Mass Malware Attack on Customers
A major South Korean ISP is accused of installing malware on over 600,000 customers’ PCs to curb torrent…...
