CVE-2024-38126: NULL Pointer Dereference

Windows Network Address Translation NAT Denial of Service Vulnerability...

CVE-2024-38132: Out-of-bounds Read

Windows Network Address Translation NAT Denial of Service Vulnerability...

PT-2024-38504 · Unknown · Code-Projects Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects Job Portal version 1.0 Description: A critical issue affects the processing of the file rw i nat.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For...

PT-2024-29822

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The vulnerability is related to a null pointer dereference in the iptable nat table init function. This issue can be triggered when iptables-restore is called at boot time, causing a kernel NUL...

PT-2024-29821

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to a potential null pointer dereference in the ip6table nat table init function. This function accesses net-gen-ptrip6table nat net ops.id, but it is exposed to user space...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a page parameter in ip/goform/NatStaticSetting, and no details of the vulnerability are provided at this time...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Linux Linux_Kernel

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the...

New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities

A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to remotely infer a user's web activity. "SnailLoad exploits a bottleneck present on all Internet connections," the researchers said in a study...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

Xiaomi Redmi RB03 Security Vulnerability

Xiaomi Redmi RB03 is a wireless router from Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Redmi RB03 v1.0.57, which stems from vulnerability to TCP DoS or hijacking attacks, where an attacker can evict the NAT mapping in the router by sending a forged TCP RST message to...

TP-LINK TL-7DR5130 Security Vulnerability

TP-LINK TL-7DR5130 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-7DR5130 v1.0.23, which stems from vulnerability to TCP DoS or hijacking attacks, where an attacker can evict the NAT mapping in the router by sending a forged TCP RST message to disconnec...

CVE-2024-37662

The TP-LINK TL-7DR5130 v1.0.23 wireless router is vulnerable to TCP DoS or hijacking attacks due to insufficient verification of the communication channel source. An attacker residing on the same WLAN can send forged TCP RST messages to evict NAT mappings, enabling them to disconnect or hijack tr...

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37662: Improper Verification of Source of a Communication Channel

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37664

The Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks due to improper verification of the source of a communication channel (CWE-940 ). An attacker located on the same WLAN as the victim can send forged TCP RST messages to evict NAT mappings in the router. This allows the at...

CVE-2024-37664: Improper Verification of Source of a Communication Channel

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...