openvswitch: Integer Underflow in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...

ALPINE-CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

DEBIAN-CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

The vulnerability in the implementation of the Linux operating system’s Layer 2 Tunneling Protocol (L2TP) kernel allows a hacker to induce a service failure.

The vulnerability of the Linux operating system’s L2TP Layer 2 Tunneling Protocol kernel implementation is related to the absence of blocking during the cleaning of skuserdata. This can lead to a race condition and the swapping of the zero pointer. Exploiting this vulnerability could allow an...

Transport Layer Security (TLS): Issues & Protocol

Although Transport layer security TLS provides enhanced security, cybercriminals have become increasingly savvy, finding ways to circumvent many of these protections. Learn how malicious actors exploit vulnerabilities within TLS to introduce new forms of malware...

UBUNTU-CVE-2022-4203

A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...

OpenSSL 代码问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

CVE-2023-20612

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629571; Issue ID: ALPS07629571...

BTicino DoorEntry HOMETOUCH 信任管理问题漏洞

BTicino DoorEntry HOMETOUCH is an application from the Italian company BTicino. It can be connected to video intercoms inside and outside the home. A vulnerability with trust management issues exists in BTicino DoorEntry HOMETOUCH iOS version 1.4.2, which stems from a missing SSL certificate...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chip ril, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chip ril, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chip ril, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters relates to memory release errors, allowing an attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters is related to memory release errors. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted LLDP packets...

CVE-2022-31364

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is lowertransportlayeronseg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound...

PT-2023-18850 · Connectwise · Connectwise Automate

Name of the Vulnerable Software and Affected Versions: Connectwise Automate version 2022.11 Description: The issue concerns cleartext authentication, where authentication is performed via HTTP with SSL disabled. This is reportedly controlled by a configuration option, allowing customers to choose...

PT-2023-1658 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the Linux Kernel, where the tls is tx ready function incorrectly checks for list emptiness. This can potentially lead to accessing a type-confused entry to the list...

CVE-2022-41019

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer error vulnerability exists in Contiki-NG version 4.8 and prior versions, which stems from an out-of-bounds write in the BLE-L2CAP module...

DC-Sonar - Analyzing AD Domains For Security Risks Related To User Accounts

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...