Lucene search
+L

1520 matches found

NVD
NVD
added 2024/03/05 5:15 a.m.35 views

CVE-2024-20834

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...

3.3CVSS3.5AI score0.0014EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/05 5:15 a.m.29 views

Information disclosure

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...

1.7CVSS6.4AI score0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/05 4:44 a.m.14 views

CVE-2024-20834

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...

3.3CVSS6.2AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/05 4:44 a.m.48 views

CVE-2024-20834

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...

3.3CVSS3.9AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/05 4:44 a.m.82 views

CVE-2024-20834

CVE-2024-20834 affects the WlanTest module in Samsung mobile environments. Affected: WlanTest versions prior to SMR Mar-2024 Release 1. Issue: sensitive information exposure enables local attackers to access the MAC address without permission. Impact: local disclosure of a low-integrity, low-avai...

3.3CVSS3.7AI score0.0014EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/04 12:00 a.m.12 views

PT-2024-18742 · Wlantest · Wlantest

Name of the Vulnerable Software and Affected Versions: WlanTest versions prior to SMR Mar-2024 Release 1 Description: The issue allows local attackers to access the MAC address without proper permission. This is a sensitive information exposure problem. Recommendations: For versions prior to SMR...

3.3CVSS6.6AI score0.0014EPSS
SaveExploits0References6
Citrix
Citrix
added 2024/02/17 12:00 a.m.12 views

App Layering - Set Static MAC Address on a Packaging Machine

By default an App layering packaging machine will use DHCP to assign an IP address. There is no built in mechanism to change this behavior to use a statically assigned IP. To work around this, a manually assigned MAC address can be set on a VM Template in your hypervisor. Then an IP address can b...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2024/01/30 6:30 a.m.26 views

network Arbitrary Command Injection vulnerability

Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the childprocess exec function without input sanitization. If attacker-controlled user input is given to the macaddressfor function of the package, it is possible for an attacker to execute...

9.8CVSS8.1AI score0.03274EPSS
SaveExploits1References7Affected Software1
Snyk
Snyk
added 2024/01/23 9:20 a.m.7 views

Arbitrary Command Injection

Overview network is a the missing network utilities in Node.js. Affected versions of this package are vulnerable to Arbitrary Command Injection due to use of the childprocess exec function without input sanitization. If attacker-controlled user input is given to the macaddressfor function of the...

9.8CVSS7.8AI score0.03274EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/23 12:00 a.m.10 views

PT-2024-1512 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: network versions prior to 0.7.0 Description: The issue exists due to insufficient input validation in the child process exec function of the Node.js Network utility. This allows a remote attacker to execute arbitrary commands on the operating...

9.8CVSS9.6AI score0.03274EPSS
SaveExploits1References13
BDU FSTEC
BDU FSTEC
added 2024/01/22 12:00 a.m.12 views

The vulnerability of the formMapDelDevice() function (boafrm/formMapDelDevice) in the Totolink X2000R router software allows a hacker to execute arbitrary commands.

The vulnerability of the formMapDelDevice function boafrm/formMapDelDevice in the Totolink X2000R router software is related to the lack of data cleaning measures at the control level when processing the macstr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

10CVSS7.1AI score0.02224EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/01/16 5:15 p.m.11 views

CVE-2024-0579

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

9.8CVSS5.6AI score0.02224EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2023/12/18 11:30 a.m.33 views

MacMaster - MAC Address Changer

MacMaster is a versatile command line tool designed to change the MAC address of network interfaces on your system. It provides a simple yet powerful solution for network anonymity and testing. Features Custom MAC Address: Set a specific MAC address to your network interface. Random MAC Address:...

7.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2023/12/12 11:30 a.m.40 views

NetProbe - Network Probe

NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a specified IP address or subnet...

7.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.11 views

The vulnerability of the setDeviceInfo() function in Tenda AX9 Wi-Fi routers allows a hacker to execute arbitrary commands.

The vulnerability of the setDeviceInfo function in Tenda AX9 Wi-Fi routers’ microprogramming software is related to the lack of measures taken to protect the SQL query structure when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.3AI score0.02411EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/12/07 4:15 p.m.6 views

CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

9.8CVSS5.9AI score0.02411EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/26 10:15 p.m.8 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS5.8AI score
SaveExploits0References2
NVD
NVD
added 2023/11/26 10:15 p.m.25 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS0.00676EPSS
SaveExploits1References2
Prion
Prion
added 2023/11/26 10:15 p.m.15 views

Design/Logic Flaw

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

6.4CVSS7AI score0.00676EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/26 12:00 a.m.8 views

PT-2023-31162 · Unknown · Precision Bridge

Name of the Vulnerable Software and Affected Versions: Precision Bridge PrecisionBridge.exe versions prior to 7.3.21 Description: The issue allows for an integrity violation where the same license key can be used on multiple systems. This is achieved through vectors involving a Process Hacker...

9.1CVSS9AI score0.00676EPSS
SaveExploits1References6
Rows per page
Query Builder