CVE-2024-8228

A vulnerability was found in Tenda O5 1.0.0.85017. It has been classified as critical. This affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the argument remark/type/time leads to stack-based buffer overflow. It is possible to initiate the attack...

Stable Channel Update for Desktop

The Stable channel has been updated to 128.0.6613.113/.114 for Windows, Mac and 128.0.6613.113 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 128.0.6613.114 for Windows and Mac...

Tenda O6 安全漏洞

Tenda O6 is a wireless bridge from Tenda, China. A buffer overflow vulnerability exists in Tenda O6 version 1.0.0.7, which originates from the parameter mark/type/time in the fromSafeSetMacFilter function of file /goform/setMacFilterList failing to correctly validate the length of the input data,...

Windows TCP/IP - RCE Checker and Denial of Service

!/usr/bin/env python3 -- coding: utf-8 -- Exploit Title: Windows IPv6 CVE-2024-38063 Checker and Denial-Of-Service Date: 2024-08-07 Exploit Author: Photubias Vendor Homepage: https://microsoft.com Vendor Advisory: 1 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063 Version:...

Windows TCP/IP - Remote Code Execution Checker and Denial of Service Exploit

Microsoft Windows IPv6 vulnerability checking proof of concept python script that causes a denial of service. Windows 10 and 11 versions under 10.0.26100.1457 and Server 2016-2019-2022 versions under 10.0.17763.6189 are affected. !/usr/bin/env python3 -- coding: utf-8 -- Exploit Title: Windows IP...

Tenda O6 安全漏洞

Tenda O6 is a wireless bridge from Tenda China. Tenda O6 version 1.0.0.7 suffers from a buffer overflow vulnerability, which originates from the failure of the mac parameter of the frommacFilterModify function in file /goform/operateMacFilter to correctly validate the length of the input data,...

Mozilla Thunderbird ESR Security Update (MFSA2024-37) - Mac OS X

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Python Multiple Vulnerabilities (Aug 2024) - Mac OS X

Python is prone to an infinite loop vulnerability leading to a denial of service DoS. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenda O5 安全漏洞

Tenda O5 is China Tenda Tenda company's a wireless bridge designed for mining video back to the network, network households, mountainous areas, such as long-distance data transmission, video surveillance and other long-distance bridge and video monitoring and design. A security vulnerability exis...

PT-2024-6434 · Tenda · Tenda O6

Name of the Vulnerable Software and Affected Versions: Tenda O6 version 1.0.0.72054 Description: A critical issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the arguments remark, type, or time leads to a stack-based buffer overflow. This...

PT-2024-6437 · Tenda · Tenda O5

Name of the Vulnerable Software and Affected Versions: Tenda O5 version 1.0.0.85017 Description: The issue is related to a stack-based buffer overflow in the fromSafeSetMacFilter function of the /goform/setMacFilterList file. This can be exploited remotely, potentially allowing an attacker to...

SUSE CVE-2022-48934

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfptunneladdsharedmac idasimpleget returns an id between min 0 and max NFPMAXMACINDEX inclusive. So NFPMAXMACINDEX 0xff is a valid id. In order for the error handling path to work correctly, t...

Google Chrome Security Update (stable-channel-update-for-desktop_13-2024-08) - Mac OS X

Google Chrome is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

DEBIAN-CVE-2022-48934

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfptunneladdsharedmac idasimpleget returns an id between min 0 and max NFPMAXMACINDEX inclusive. So NFPMAXMACINDEX 0xff is a valid id. In order for the error handling path to work correctly, t...

UBUNTU-CVE-2022-48934

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfptunneladdsharedmac idasimpleget returns an id between min 0 and max NFPMAXMACINDEX inclusive. So NFPMAXMACINDEX 0xff is a valid id. In order for the error handling path to work correctly, t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a memory leak in the nfptunneladdsharedmac function...

Google Chrome Security Update (stable-channel-update-for-desktop_21-2024-08) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

VMware Fusion 13.0.x < 13.5.1 Multiple Vulnerabilities (VMSA-2024-0011)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 13.0.x prior to 13.5.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CVE-2022-48882

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY Upon updating MAC security entity SecY in hw offload path, the macsec security association SA initialization routine is called. In case of...

CVE-2022-48882

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY Upon updating MAC security entity SecY in hw offload path, the macsec security association SA initialization routine is called. In case of...