22 matches found
Exploit for Race Condition in Vercel Next.Js
CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC La...
SUSE CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
EUVD-2022-51739
Malicious code in bioql PyPI...
CVE-2025-34200 Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext
Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to...
CVE-2022-4390
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...
CVE-2019-3949
Arlo Basestation firmware 1.12.0.127940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device...
CVE-2022-4390
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...
Design/Logic Flaw
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...
CVE-2022-4390
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...
CVE-2022-4390
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...
Microsoft Windows Server Service 信息泄露漏洞
Microsoft Windows is a desktop operating system from Microsoft Corporation USA, and an information disclosure vulnerability exists in Microsoft Windows Server Service. The vulnerability stems from errors in the configuration of the network system or product during operation. An attacker could use...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google. An information disclosure vulnerability exists in Google Android versions prior to 10, 11, and 12. The vulnerability arises from a configuration error in the network system or product during operation. An attacker could...
tpm2-tools 信任管理问题漏洞
tpm2-tools is a source code library. A trust management issue vulnerability exists in the tpm2-tools package, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information abou...
Google Android Input Validation Error Vulnerability
Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS has a security vulnerability that arises from errors in the configuration of a networked system or product during operation, which can be exploited by unauthorized...
Dell RSA BSAFE Micro Edition Suite Information Disclosure Vulnerability (CNVD-2019-40481)
Dell RSA BSAFE Micro Edition Suite is an encryption toolkit from Dell USA. An information disclosure vulnerability exists in Dell RSA BSAFE Micro Edition Suite. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An attacker...
Google Android VPN Information Disclosure Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. VPN is one of the VPN Virtual Private Network components. An information disclosure vulnerability exists in the VPN component of Android, which arises from errors in the configuration ...
Google Android Storage Driver Information Disclosure Vulnerability (CNVD-2019-34477)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Storage driver is one of the storage drivers. An information disclosure vulnerability exists in the Storage driver in Android, which arises from errors in the configuration of a network...
Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38567)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...
Google Android Information Disclosure Vulnerability (CNVD-2019-38542)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...
Google Android Code Execution Vulnerability (CNVD-2019-40998)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A code execution vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit...