PT-2024-16052 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been found, affecting the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId leads to SQL...

Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach

Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being "USDoD ," a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI 's InfraGard program and leaking contact information for 80,000 members. More recently, USDoD was behind a breach at the...

Malicious code in netsec-monitor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d53ca1631ad5169910977a710485caa2e85f057cba20a5d29bdcaeccda0cf4f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

GSD-2022-1007464 net: netsec: fix error handling in netsec_register_mdio()

net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

GSD-2022-1007349 net: netsec: fix error handling in netsec_register_mdio()

net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.223 by commit...

GSD-2022-1007175 net: netsec: fix error handling in netsec_register_mdio()

net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.153 by commit...

GSD-2022-1006952 net: netsec: fix error handling in netsec_register_mdio()

net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006634 net: netsec: fix error handling in netsec_register_mdio()

net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35207

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.77 Description The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v5.15.77. The actual impact and attack plausibility have not ye...

PT-2022-34889 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v6.0.7. The actual impact and attack plausibility have not yet...

PT-2022-35604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v5.4.223. The actual impact and attack plausibility have not...

PT-2022-35430

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.153 Description The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v5.10.153. The actual impact and attack plausibility have not...

PT-2022-35719 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v4.19.264. The actual impact and attack plausibility have no...

GSD-2022-1006520 net: enetc: deny offload of tc-based TSN features on VF interfaces

net: enetc: deny offload of tc-based TSN features on VF interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1000517 net: fix a memleak when uncloning an skb dst and its metadata

net: fix a memleak when uncloning an skb dst and its metadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution Exploit

Exploit for windows platform in category web applications Exploit Title: Arbitrary Code Execution Google Dork: N/A Date: 03-07-2018 Exploit Author: Clutchisback1 Vendor Homepage: https://www.acl.com Software Link: https://www.acl.com/products/acl-analytics/ Version: 11.x - 13.0.0.579 Tested on:...

ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution

ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution Exploit Title: Arbitrary Code Execution Google Dork: N/A Date: 03-07-2018 Exploit Author: Clutchisback1 Vendor Homepage: https://www.acl.com Software Link: https://www.acl.com/products/acl-analytics/ Version: 11.x - 13.0.0.579 Tested on:...

Experts: OpenBSD Backdoor Allegations 'Almost Certainly False'

The incredible allegations that developers working under the auspices of the FBI and Justice Department planted a backdoor in the IPSec stack of the OpenBSD operating system are likely just that, experts say: not credible. “There is no way that the FBI paid anyone to create backdoors in OpenBSD a...

Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver)

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...