Remote Code Execution (RCE)

nd-validator is vulnerable to remote code execution RCE. A malicious user can inject and execute arbitrary code due to the lack of sanitization of user input before executing the eval function...

Code injection

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

Juniper Networks Junos OS PFE DoS Vulnerabilities

Junos OS is prone to a denial of service vulnerability while handling IPv6 ND advertisements. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

CVE-2016-1409

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service packet-processing outage via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in Ma...

carshq.com XSS vulnerability

Vulnerable URL: http://www.carshq.com/search/index.cfm/condition/Used/location/FARGO,%20ND%2058104rd/test/location/Fargo%22%3E%3Ciframe%20src=%22javascript:alert%28'XSSPOSED'%29%22%3E%3C/iframe%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability...

CVE-2015-6359

Cisco IOS XE IPv6 Neighbor Discovery Denial of Service (CVE-2015-6359) affects ASR platforms running 15.3(3)S0.1, where the ND handling mishandles internal tables. An unauthenticated, adjacent attacker can flood the device with crafted ND messages, causing memory exhaustion or a crash. Public ref...

CVE-2015-6359

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS 15.33S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service memory consumption or device crash via a flood of crafted ND messages, aka Bug ID CSCup28217...

CVE-2015-2924

CVE-2015-2924 affects NetworkManager (ND/IPv6) via receive_ra in rdisc/nm-lndp-rdisc.c, allowing remote reconfiguration of hop-limit through a small RA hop_limit value. Public references confirm the issue in NetworkManager 1.x and describe a fix in the CentOS/Red Hat advisories (upstream 1.0.6). ...

Cisco IOS IPv6 Snooping DoS (cisco-sa-20150923-fhs)

The remote Cisco IOS device missing vendor-supplied security patches, and is configured for IPv6 snooping. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IPv6 Snooping feature due to missing Control Plane Protection CPPr protection mechanisms. An...

CVE-2015-6279

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

CVE-2015-6279

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

CVE-2015-2922

The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

CVE-2015-2922

CVE-2015-2922 is a Linux kernel IPv6 Neighbor Discovery flaw in the ndisc_router_discovery path that lets a crafted Router Advertisement with a small hop_limit reconfigure the hop-limit on the receiving interface. It affects the IPv6 stack prior to kernel 3.19.6; the impact is loss of connectivit...

CVE-2015-2922

The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

Race condition

Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...

Destiny Media Player 1.61 - (lst File) Local Buffer Overflow Exploit

No description provided by source. Destiny Media Player 1.61 lst File Local Buffer overflow Exploit By:Encrypt3d.M!nd i was so stupid when i wrote the poc coz i didn't realize somethings :p well this is workin exploit tested on windows xp sp3 don't double click the file,import it from the program...

Rosoft Media Player 4.2.1 - Local Buffer Overflow Exploit

No description provided by source. Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day By:Encrypt3d.M!nd Well,There is a buffer overflow in the program were all the supported types are Affectedm3u,rml,txt,Also Rosoft Media Player treat all the other types as txt so all the types are...

Chasys Media Player 1.1 - (.pls) Stack Overflow Exploit (2)

No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .pls Stack Overflow Exploit By: Encrypt3d.M!nd Credit flys to: zAx the good thing in this one that the program won't crash when the playlist file imported,and will keep running. header =...

Chasys Media Player 1.1 - (.m3u) Stack Overflow Exploit

No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .m3u Stack Overflow Exploit By: Encrypt3d.M!nd Credit flys to: zAx the good thing in this one that the program won't crash when the playlist file imported,and will keep running. header = EXTM3U\n junk = \x41260 eip =...