212 matches found
scanopy
Scanopy La documentation réseau, sans le dessin. Scanopy remplace les schémas réseau manuels par un modèle maintenu en continu de ce qui tourne réellement. Un seul démon scanne selon un calendrier et produit quatre vues à partir de chaque scan : L2 physique, L3 logique, charges de travail et...
CVE-2024-46658
CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Vulnérabilité d'injection de commande Utilisation 1- Modifiez l'URL dans le script. 2- Modifiez la valeur CookieLogin dans le script. 3- Exécutez le script, il vous permettra d'exécuter des commandes. Détails de la vulnérabilité GET...
CVE-2024-26304-RCE-exploit
CVE-2024-26304 - ArubaOS 원격 코드 실행 취약점 개요 CVE-2024-26304 는 ArubaOS 의 L2/L3 관리 서비스 버퍼 오버플로우로 인한 치명적인 원격 코드 실행RCE 취약점입니다. 공격자는 PAPIProcess Application Programming Interface UDP 포트 8211 로 특수하게 조작된 패킷을 전송하여 이 취약점을 악용할 수 있으며, 이로 인해 상승된 권한으로 임의 코드가 실행됩니다. CVSS 점수: 9.8 치명적 공격 벡터 : 네트워크 공격 복잡성 : 낮음 필요 권한 ...
widevine-l3-decryptor
Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...
widevine-l3-decryptor
تحذير الإهمال كان هذا المستودع يحتوي على كود لتجاوز نظام Widevine L3 DRM في متصفح Chrome على أجهزة Windows. لم يعد يعمل اعتبارًا من 31 مايو 2021، ولكن يمكنك قراءة الكتابة عن الهندسة العكسية. تحديث أصدرت Google طلب إزالة بموجب DMCA ضد معظم فروع هذا المستودع. تم أرشفة المحتويات الأصلية للمستودع في...
PT-2026-94895
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the resctrl file system. The mbm handle overflow and cqm handle limbo workers, which are scheduled via delayed work embedded in struct rdt l3 mon domain,...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/prefix_sid.go file of the SRv6 L3 Service protocol for the border gateway GoBGP allows a attacker to cause a service failure.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...
scanopy v0.17.14
Scanopy Network documentation, without the drawing. Scanopy replaces manual network diagrams with a continuously maintained model of what's actually running. A single daemon scans on a schedule and produces four views from each scan: L2 physical, L3 logical, workloads, and applications. Unlike...
EUVD-2026-70201
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...
vc5 v0.3.4
VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...
Towards Operator-Empowered Vulnerability Hotfixing for 5G Radio Access Networks
Cellular protocol vulnerabilities can remain exploitable for months or years while standards bodies, vendors, and mobile network operators MNOs coordinate permanent fixes. We present Buckler, a framework that enables an MNO to deploy temporary, local, and reversible hotfixes in its radio access...
CVE-2026-72444
In the Linux kernel, the following vulnerability has been resolved: flowdissector: check device type before reading ETHADDRS skbflowdissect unconditionally reads 12 bytes from ethhdrskb when FLOWDISSECTORKEYETHADDRS is requested. This assumes the skb has a valid Ethernet header at macheader, whic...
EUVD-2026-59343
In the Linux kernel, the following vulnerability has been resolved: flowdissector: check device type before reading ETHADDRS skbflowdissect unconditionally reads 12 bytes from ethhdrskb when FLOWDISSECTORKEYETHADDRS is requested. This assumes the skb has a valid Ethernet header at macheader, whic...
PT-2026-72632
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the skb flow dissect function where it unconditionally reads 12 bytes from the Ethernet header when FLOW DISSECTOR KEY ETH ADDRS is requested. This occurs because the...
Debian dla-4735 : neutron-api - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4735 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4735-1 [email protected] https://www.debian.org/lts/security/...
CVE-2026-55707
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scop...
CVE-2026-55707
CVE-2026-55707 affects OpenStack Neutron before 28.0.2. The subnetpool onboarding API (PUT /v2.0/subnetpools/{id}/onboard_network_subnets) does not verify subnet ownership, allowing an authenticated but lower-privileged user to onboard subnets from another project’s shared network into their own ...
EUVD-2026-53046
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scop...
CVE-2026-55707
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scop...
PT-2026-67950
Name of the Vulnerable Software and Affected Versions OpenStack Neutron versions prior to 28.0.2 Description The subnetpool onboarding API fails to verify the ownership of target subnets. This allows an authenticated user to onboard subnets belonging to another project's shared network into their...