CVE-2023-32275

CVE-2023-32275 concerns SoftEther VPN and PacketiX VPN. The vulnerability lies in the CtEnumCa() function, affecting SoftEther VPN versions 4.41-9782-beta and 5.01.9674. By sending specially crafted network packets, an attacker can trigger information disclosure, exposing sensitive data. Several ...

CVE-2023-31192

The CVE-2023-31192 entry concerns SoftEther VPN 5.01.9674. The vulnerability resides in the ClientConnect() function and is an information-disclosure issue triggered by specially crafted network packets, potentially enabling a man-in-the-middle to exfiltrate sensitive data. Affected component/fil...

Command Execution Vulnerability in Tianyue Network Security Audit System of Qixingchen Information Technology Group Co. Ltd (CNVD-2023-85472)

Providence Peak Network Security Audit System is a compliance management system for fine-grained auditing of network operation behaviors in business environments. A command execution vulnerability exists in the Tianyue Network Security Audit System of Qixing Information Technology Group Co., Ltd,...

What to know about the HTTP/2 Rapid Reset DDoS attacks

Cisco Talos is actively tracking the novel distributed denial-of-service DDoS attacks cloud services provider Cloudflare disclosed earlier this week. The techniques described in Cloudflares blog post resulted in a record-breaking DDoS attack and could facilitate much larger attacks in the future...

CVE-2023-44190 Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded ...

CVE-2023-44190

CVE-2023-44190 concerns an Origin Validation vulnerability in MAC address validation on Juniper Networks Junos OS Evolved for PTX10001/PTX10004/PTX10008/PTX10016. The root cause is bypass of MAC address checking, allowing a network-adjacent attacker to forward MAC addresses not intended for the a...

CVE-2023-44189 Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

CVE-2023-4957 Authentication Bypass on Zebra ZTC

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

PT-2023-6311 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS QFX5000 Series versions prior to 20.4R3-S6 Juniper Networks Junos OS QFX5000 Series versions 21.1 prior to 21.1R3-S5 Juniper Networks Junos OS QFX5000 Series versions 21.2 prior to 21.2R3-S5 Juniper Networks Junos OS...

CVE-2023-44959

CVE-2023-44959 affects D-Link DSL-3782 (v1.03 and earlier). The vulnerability allows remote authenticated attackers to execute arbitrary code as root via the network settings page (Router IP Address field). Related materials in connected docs reference CVE-2023-27216 for the same device and show ...

CVE-2023-32972

CVE-2023-32972 affects QNAP QTS/QTS hero/QTScloud line: a buffer copy without input size checking can allow an authenticated administrator to execute code over the network. Root cause is improper input size handling in the affected component; no exploit details are provided in the documents. Affe...

CVE-2023-32971

Summary: CVE-2023-32971 is a buffer copy without input size checking that affects multiple QNAP OS releases. Affected products/areas: QTS and QuTS hero/QuTScloud family (QTS 5.0.1.2425+, QTS 5.1.0.2444+, QTS 4.5.4.2467+, QuTS hero h5.0.1.2515+, h5.1.0.2424+, h4.5.4.2476+, QuTScloud c5.1.0.2498+)....

PT-2023-6229

Name of the Vulnerable Software and Affected Versions Network Security Services NSS versions prior to the fixed version Firefox versions prior to 124 Firefox ESR versions prior to 115.9 Thunderbird versions prior to 115.9 Description The issue is related to the implementation of PKCS1 v1.5, OAEP,...

(0Day) D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of...

CVE-2023-3654

CVE-2023-3654 affects cashIT! devices from PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH up to version 2023.02.37. The issue is an origin bypass via the HTTP Host header, triggered by an HTTP endpoint exposed to the network. The root cause is a host-header-based origin check bypass, enabling u...

CVE-2023-3770

CVE-2023-3770 describes an incorrect input validation vulnerability in Ingeteam’s INGEPAC DA devices. The flaw allows an attacker on the same network to use the UDP discovery port (1925/UDP) to obtain device‑specific information without authentication. Affected component is the data validation on...

CVE-2023-3769

CVE-2023-3769 is an input‑validation flaw reported in Ingeteam components (INGEPAC EF/DA) that can be exploited over the network to fuzz and trigger a DoS via the MMS protocol, potentially rebooting the device and services. The connected sources cite affected firmware/versions (e.g., INGEPAC DA34...

CVE-2023-3768

CVE-2023-3768 affects Ingeteam’s INGEPAC EF/DA family (e.g., INGEPAC DA3451 firmware 0.29.2.42 and INGEPAC FC5066 firmware 9.0.22.6+6.1.1.22+5.3.1.1). The root cause is an input validation error that could enable an attacker with network access to perform fuzzing against MMS protocol handling, en...

CVE-2023-20033

Cisco IOS XE Software for Catalyst 3650 and 3850 Series Switches is affected by CVE-2023-20033. The root cause is improper resource management when processing traffic on the management interface, allowing an unauthenticated, remote attacker to inject a high rate of traffic and cause the device to...

Design/Logic Flaw

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in othe...