X.400 address type confusion in X.509 `GeneralName`

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

Medium: curl

Issue Overview: A vulnerability was found in curl. This issue occurs due to an erroneous function. A malicious server could make curl within Network Security Services NSS get stuck in a never-ending busy loop when trying to retrieve that information. This flaw allows an Infinite Loop, affecting...

root.netz-wolf.de Cross Site Scripting vulnerability OBB-3178376

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3913

CVE-2022-3913 affects Rapid7 Nexpose and InsightVM, versions 6.6.82–6.6.177, due to failure to validate the update server’s TLS certificate when downloading updates. This could allow a network‑adjacent attacker with some access along the path to supply their own HTTPS endpoint or intercept traffi...

CVE-2022-3913 Rapid7 Nexpose Certificate Validation Issue

Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when downloading updates. This failure could allow an attacker in a privileged position on the network to provide their own HTTPS endpoint, or intercept communications to the...

Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type (CVE-2021-38397)

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. This plugin only works with Tenable.ot. Please visit...

We Don’t Just Patch – We Hack

We Don’t Just Patch – We Hack By Trellix · February 1, 2023 This blog was written by Douglas McKee If you have read any security advisories, technology news articles or even our very own Bug Report, you have continually been bombarded with the message to patch, patch, patch! Patching is critical ...

Delta Electronics DOPSoft

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for remote code execution. 3. TECHNICAL...

EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

Logic Flaw Vulnerability in Backend Management of E-House Real Estate System

Ltd. is a company whose business scope includes: Internet data services, network and information security software development, software and information technology services, software development, information technology consulting services, information processing and storage support services,...

CVE-2022-41022

CVE-2022-41022 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing, specifically in the template handling the no vpn l2tp advanced name ... options WORD command. A crafted network packet can trigger the overflow and lead ...

CVE-2022-41023

CVE-2022-41023 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflow in the DetranCLI command parsing for vpn pptp advanced name (and related templates). The issue arises from unsafe handling of command parameters (e.g., WORD, DNS, MTU, MRU, MPPE, stateful), enablin...

CVE-2022-41026

CVE-2022-41026 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Cisco CVE entry describes multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing for the template no vpn pptp advanced name (and related commands), enabling arbitrary command execution via craf...

CVE-2022-41025

CVE-2022-41025 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The TALOS report details stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the template handling for commands like vpn pptp advanced name dns (yes|no) mtu mru mppe (on|off) stateful (o...

CVE-2022-41021

CVE-2022-41021 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing functionality, exploitable through crafted network packets that trigger the template: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) pas...

CVE-2022-41013

CVE-2022-41013 affects Siretta QUARTZ-GOLD DetranCLI. TALOS reports stack-based buffer overflow vulnerabilities in the DetranCLI parser for the command template static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null). A crafted network packet can trigger an overfl...

CVE-2022-41019

CVE-2022-41019 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The vulnerability is a stack-based buffer overflow in the Det r a nCLI command parsing, triggered by the template handling: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) password (WORD|null). A specially crafted...

CVE-2022-41016

CVE-2022-41016 is one of multiple stack-based buffer overflow vulnerabilities in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020’s DetranCLI command parsing. Talos’ TALOS-2022-1613 analysis confirms this family of issues affects the DetranCLI parser and documents several vulnerable command templates, ...

CVE-2022-41017

CVE-2022-41017 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/NVD entries describe several stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|of...

CVE-2022-41012

Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) is affected by CVE-2022-41012 due to stack-based buffer overflows in the DetranCLI command parsing, specifically in the templates used to handle commands like no schedule link1 etc. The vulnerabilities are in the DetranCLI parsing logic where unsafe fo...