Lucene search
+L

98 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/19 12:00 a.m.18 views

The vulnerability in the wizpppoe.cgi script of the microprogramming software for Netgear XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the wizpppoe.cgi microprogramming software of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2024/11/05 3:15 p.m.7 views

CVE-2024-52025

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00312EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/05 12:00 a.m.8 views

NETGEAR XR300、NETGEAR R7000P和NETGEAR R6400v2 安全漏洞

NETGEAR R6400v2 and others are products of NETGEAR USA.NETGEAR R6400v2 is a router.NETGEAR R7000P is a wireless router.NETGEAR XR300 is a wireless router. A security vulnerability exists in NETGEAR XR300 version v1.0.3.78, R7000P version v1.3.3.154, and R6400v2 version 1.0.4.128, which stems from...

5.7CVSS7.2AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/26 12:00 a.m.8 views

PT-2024-7081 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version DIR 878 FW130B08 D-Link DIR-882 version DIR 882 FW130B06 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command in the SetVirtualServerSettings function ...

8CVSS8AI score0.02108EPSS
SaveExploits0References7
OSV
OSV
added 2024/08/21 2:30 p.m.21 views

GO-2023-2070 Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc

Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc...

5.3CVSS4.9AI score0.004EPSS
SaveExploits1References7
Fedora
Fedora
added 2024/06/02 3:39 a.m.12 views

[SECURITY] Fedora 39 Update: rust-local_ipaddress-0.1.3-8.fc39

Get your local IP address without panic...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.9 views

Fedora: Security Advisory for rust-local_ipaddress (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2024/05/26 1:29 a.m.16 views

[SECURITY] Fedora 40 Update: rust-local_ipaddress-0.1.3-8.fc40

Get your local IP address without panic...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2024/05/05 12:00 a.m.10 views

Ruijie Networks RG-UAC 安全漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. A security vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which originates from the parameter...

7.2CVSS5.1AI score0.06701EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.9 views

D-Link DIR-2640 安全漏洞

The D-Link DIR-2640 is a high power Wi-Fi router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-2640 that stems from a LocalIPAddress command injection remote code execution vulnerability...

6.8CVSS7.5AI score0.01796EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/03 12:38 a.m.47 views

GHSA-MF74-QQ7W-6J7V Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

Impact A major blind SSRF has been found in remark-images-download, which allowed for requests to be made to neighboring servers on local IP ranges. The issue came from a loose filtering of URLs inside the module. Imagine a server running on a private network 192.168.1.0/24. A private service...

6.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2024/02/03 12:38 a.m.22 views

Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

Impact A major blind SSRF has been found in remark-images-download, which allowed for requests to be made to neighboring servers on local IP ranges. The issue came from a loose filtering of URLs inside the module. Imagine a server running on a private network 192.168.1.0/24. A private service...

6.8AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/09/20 6:30 a.m.18 views

GHSA-7MP6-929P-PQHJ Croc requires senders to provide local IP addresses in cleartext

An issue was discovered in Croc before 9.6.16. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...

5.3CVSS4.9AI score0.004EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2023/09/20 6:30 a.m.30 views

Croc requires senders to provide local IP addresses in cleartext

An issue was discovered in Croc before 9.6.16. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...

5.3CVSS5AI score0.004EPSS
SaveExploits1References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/09/20 6:15 a.m.5 views

CVE-2023-43618

An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...

5.3CVSS5.8AI score0.004EPSS
SaveExploits1References4
Prion
Prion
added 2023/09/20 6:15 a.m.13 views

Design/Logic Flaw

An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...

5CVSS5AI score0.004EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/09/20 12:00 a.m.34 views

CVE-2023-43618

An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message...

5.4AI score0.004EPSS
SaveExploits1References3
CNVD
CNVD
added 2023/07/12 12:00 a.m.12 views

Unspecified Vulnerability in Emby Server

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. Emby Server suffers from a security vulnerability that originated from allowing an attacker to perform a login bypass attack by setting th...

9.8CVSS6.6AI score0.01497EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.8 views

PT-2023-5155 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: Multiple buffer overflow vulnerabilities exist in the vtysh ubus binary due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An...

9CVSS7.5AI score0.0146EPSS
SaveExploits1References6
OSV
OSV
added 2023/06/28 8:15 p.m.7 views

CVE-2021-25827

Emby Server 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address...

9.8CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder